Understading Rails 8.1 Action Controller Live SSE

Modern applications often need to deliver information to the browser as it becomes available, rather than waiting until the entire controller action finishes.

Examples include:

  • Live progress updates
  • Long-running exports
  • Real-time dashboards
  • AI-generated responses
  • Build/deployment logs
  • Notifications
  • Server-side status updates
  • Streaming large files
  • Server-Sent Events (SSE)

Rails provides this capability through ActionController::Live.

Rails 8.1 also exposes a particularly useful companion class:

ActionController::Live::SSE

Together, they provide a relatively simple way to implement HTTP streaming and Server-Sent Events directly from a Rails controller.

One important clarification: ActionController::Live itself is not new in Rails 8.1. It has existed for several Rails versions. However, Rails 8.1 continues to provide and refine the streaming infrastructure, including configuration around execution-state sharing. The examples below are based on the Rails 8.1 API.


What is ActionController::Live?

Normally, a Rails controller behaves conceptually like this:

Browser
|
| HTTP request
v
Rails Controller
|
| execute entire action
|
| generate complete response
v
Browser receives response

For example:

def report
result = generate_report
render json: result
end

The browser generally waits until the action has generated its response.

With ActionController::Live, Rails can instead stream pieces of the response while the action is still executing:

Browser
|
| HTTP request
v
Rails Controller
|
| write chunk #1
|--------------------> Browser
|
| write chunk #2
|--------------------> Browser
|
| write chunk #3
|--------------------> Browser
|
| finish

Rails documents ActionController::Live as a module that allows controller actions to stream data to the client as it is written.


Basic ActionController::Live Example

A minimal controller looks like this:

class StreamsController < ApplicationController
  include ActionController::Live

  def show
    response.headers["Content-Type"] = "text/plain"

    5.times do |i|
      response.stream.write "Chunk #{i + 1}\n"
      sleep 1
    end
  ensure
    response.stream.close
  end
end

The important part is:

include ActionController::Live

and then:

response.stream.write(...)

Instead of constructing one large response, the controller writes directly to the response stream.

What happens internally?

Rails executes the streaming action in a separate thread so that the response can begin flowing to the client while the controller continues producing data. Rails 8.1 uses a dedicated cached thread-pool executor for live controller processing.

That distinction is extremely important for production applications.


What is Server-Sent Events?

ActionController::Live is the general streaming mechanism.

SSE is a specific protocol built on top of HTTP streaming.

Server-Sent Events allow the server to continuously send events to a browser over a long-lived HTTP connection.

The browser uses the standard JavaScript API:

const source = new EventSource("/events");
source.onmessage = event => {
console.log(event.data);
};

The communication is one-way:

Server --------------------> Browser

Unlike WebSockets:

Server <-------------------> Browser

SSE is therefore a good choice when the browser mainly needs to listen for server-side updates rather than continuously send messages back to the server. The browser’s EventSource API maintains the persistent connection and automatically handles reconnection.


ActionController::Live::SSE

Rails provides:

ActionController::Live::SSE

to make SSE formatting easier.

Instead of manually writing:

event: update
data: {"status":"processing"}

Rails can generate the SSE format for you.

The class accepts a stream:

sse = ActionController::Live::SSE.new(response.stream)

and then:

sse.write({ status: "processing" })

Rails converts non-string objects to JSON and writes them using SSE formatting.


Building a Rails SSE Endpoint

Let’s build a realistic example.

Controller

class NotificationsController < ApplicationController
  include ActionController::Live

  def index
    response.headers["Content-Type"] = "text/event-stream"
    response.headers["Cache-Control"] = "no-cache"

    sse = ActionController::Live::SSE.new(
      response.stream,
      retry: 3000
    )

    10.times do |i|
      sse.write(
        {
          message: "Notification #{i + 1}",
          timestamp: Time.current.iso8601
        },
        event: "notification",
        id: i + 1
      )

      sleep 2
    end
  ensure
    sse&.close
  end
end

Rails’ SSE implementation supports three primary options:

:event
:retry
:id

event identifies the event type, retry tells the browser how long to wait before reconnecting, and id becomes the event identifier used for Last-Event-ID on reconnect.


JavaScript Client

The browser can consume the endpoint using EventSource.

const source = new EventSource("/notifications");
source.addEventListener("notification", event => {
const data = JSON.parse(event.data);
console.log(data.message);
console.log(data.timestamp);
});
source.onerror = error => {
console.error("SSE connection error", error);
};

The browser automatically opens a persistent HTTP connection.

When Rails sends:

event: notification
id: 1
data: {"message":"Notification 1","timestamp":"..."}

the browser invokes:

source.addEventListener("notification", ...)

The SSE wire format is based on text fields such as event, data, id, and retry, with an empty line terminating each event.


ActionController::Live vs ActionController::Live::SSE

This distinction is worth remembering.

FeatureActionController::LiveActionController::Live::SSE
PurposeGeneric HTTP streamingSSE formatting
OutputArbitrary stream dataSSE events
Browser APIDepends on your protocolEventSource
JSON handlingYou handle itRails can serialize objects
Event namesManualBuilt in
Event IDsManualBuilt in
Reconnection supportManualSSE protocol support
Typical useCSV/file/log streamingNotifications/live updates

Think of it like this:

ActionController::Live
        |
        +---- response.stream.write
        |
        +---- send_stream
        |
        +---- SSE
                 |
                 +---- event
                 +---- data
                 +---- id
                 +---- retry


Streaming a Large CSV

ActionController::Live is not limited to SSE.

A very practical use case is exporting a large dataset.

Rails 8.1 exposes send_stream, specifically for generating data progressively rather than buffering the entire file in memory.

For example:

class ReportsController < ApplicationController
  include ActionController::Live

  def export
    send_stream(
      filename: "users.csv",
      type: "text/csv"
    ) do |stream|

      stream.write "id,email,created_at\n"

      User.find_each do |user|
        stream.write(
          "#{user.id},#{user.email},#{user.created_at.iso8601}\n"
        )
      end
    end
  end
end

This is much better than:

csv = User.find_each.map do |user|
  ...
end

send_data csv

for a very large export.

The second approach potentially builds a large amount of data in memory.

The streaming approach allows Rails to send the output progressively.


A Very Interesting Use Case: AI Streaming

Another practical use case is streaming generated text.

Imagine an AI API returns tokens incrementally:

Hello
Hello, I
Hello, I can
Hello, I can help
Hello, I can help you
...

Instead of waiting for the complete response:

response = ai_client.generate(...)
render json: response

you could expose a streaming endpoint:

class AiController < ApplicationController
  include ActionController::Live

  def stream
    response.headers["Content-Type"] = "text/event-stream"

    sse = ActionController::Live::SSE.new(
      response.stream,
      event: "token"
    )

    ai_client.stream(prompt) do |token|
      sse.write(
        {
          content: token
        }
      )
    end
  ensure
    sse&.close
  end
end

The browser can then update the UI immediately as chunks arrive.

This is one of the reasons HTTP streaming has become particularly relevant for modern applications.


Real-Time Notifications

A very common architecture is:

                    +----------------+
                    | Rails Server   |
                    +--------+-------+
                             |
                             | SSE
                             |
                    +--------v-------+
                    | Browser       |
                    +----------------+

For example:

class NotificationsController < ApplicationController
  include ActionController::Live

  def stream
    response.headers["Content-Type"] = "text/event-stream"

    sse = ActionController::Live::SSE.new(
      response.stream,
      event: "notification"
    )

    loop do
      notification = Notification.pending.first

      if notification
        sse.write(
          {
            id: notification.id,
            message: notification.message
          },
          id: notification.id
        )
      else
        # Heartbeat
        sse.write(": keep-alive")
      end

      sleep 2
    end
  ensure
    sse&.close
  end
end

However, this example introduces an important architectural question.

Where does the event come from?

Polling the database inside every open SSE request is usually not a scalable architecture.

For production systems, you will typically want an event source such as:

Database
|
v
Redis / PubSub / Message Broker
|
v
Rails SSE endpoint
|
v
Browser

That is a much better design than repeatedly querying the database from every connected client.


Heartbeats Matter

Long-lived HTTP connections can be terminated by proxies, load balancers, or infrastructure when no data is transferred for a while.

SSE supports comment messages such as:

: heartbeat

which browsers ignore as application events but still receive as stream traffic.

The SSE format explicitly allows comment lines, and they can be used to keep connections alive.

In Rails:

sse.write(": heartbeat")

or, depending on how you implement the stream, write an SSE comment directly to response.stream.

For an application with long periods of inactivity, heartbeat strategy should be considered part of your production design.


Reconnection and Last-Event-ID

One of the most useful SSE features is event IDs.

Suppose Rails sends:

id: 101
event: order_update
data: {"status":"paid"}

The browser remembers the last event ID.

If the connection is interrupted, the browser may reconnect and send:

Last-Event-ID: 101

Rails’ SSE class supports the id field specifically for this scenario.

Your controller can inspect it:

last_id = request.headers["Last-Event-ID"]

and resume appropriately:

updates = OrderUpdate.where("id > ?", last_id.to_i)
updates.find_each do |update|
sse.write(
update.attributes,
id: update.id,
event: "order_update"
)
end

This is significantly more robust than treating every reconnect as a completely new stream.


The Most Important ActionController::Live Caveat: Threads

This is probably the most important thing to understand before introducing ActionController::Live.

Rails executes the streaming action in a separate thread.

Therefore:

class MyController < ApplicationController
include ActionController::Live
def stream
# Runs in streaming execution context
end
end

should not be treated exactly like a normal synchronous controller action.

Rails explicitly warns that streaming actions need to be thread-safe and should not share unsafe mutable state between threads.

Avoid patterns such as:

@@shared_state = {}
@@shared_state[user_id] = ...

or other mutable global/class-level state unless it is deliberately designed for concurrent access.

Prefer:

Redis
Database
Message broker
Thread-safe abstractions

for shared state.


Rails 8.1: Execution State Sharing

Rails 8.1 exposes:

config.action_controller.live_streaming_excluded_keys

which controls which execution-state keys should not be copied into the streaming thread.

By default, Rails shares execution state from the parent thread.

One important example involves Active Record connection routing.

Rails documents this configuration for cases such as:

ActiveRecord::Base.connected_to(role: :reading) do
...
end

where the streaming thread might otherwise inherit the parent’s database connection context.

For example:

config.action_controller.live_streaming_excluded_keys =
[:active_record_connected_to_stack]

This is a more advanced Rails 8.1 consideration, but it demonstrates an important point:

Streaming is not just “normal controller code with response.stream.write.”

Execution context matters.


Headers Must Be Set Before Streaming

Once you start writing to the stream:

response.stream.write(...)

the response can be committed.

After the response is committed, you cannot safely modify headers.

Rails specifically documents that calling write or close commits the response.

Therefore do this:

response.headers["Content-Type"] = "text/event-stream"
response.headers["Cache-Control"] = "no-cache"
sse = ActionController::Live::SSE.new(response.stream)
sse.write(...)

Not:

sse.write(...)
response.headers["Cache-Control"] = "no-cache"

The second version is too late.


Always Close the Stream

This is another critical rule.

Always ensure the stream closes:

ensure
sse&.close
end

or:

ensure
response.stream.close
end

Rails explicitly warns that failing to close the stream can leave the socket open indefinitely.

A production implementation should therefore almost always look like:

begin
# streaming work
ensure
# close stream
end

Handling Client Disconnects

A browser can disappear at any time.

For example:

User closes tab
|
v
SSE connection disappears
|
v
Rails stream encounters disconnect

Rails exposes:

ActionController::Live::ClientDisconnected

for client disconnect situations.

You can handle it explicitly when appropriate:

rescue ActionController::Live::ClientDisconnected
Rails.logger.info("SSE client disconnected")
ensure
sse&.close
end

For long-running streams, disconnect handling is especially important because you don’t want server-side work continuing unnecessarily after the browser is gone.


Proxy and Middleware Buffering

A common mistake is to test streaming locally and assume production will behave identically.

You might write:

response.stream.write "hello"
sleep 5
response.stream.write "world"

and expect:

hello

to appear immediately.

But an intermediary could buffer the response.

Possible intermediaries include:

Browser
|
Load Balancer
|
Reverse Proxy
|
Nginx
|
Rails

Rails itself documents that response buffering can interfere with streaming, including interaction with Rack::ETag in relevant Rack versions.

Therefore streaming should always be tested through the same infrastructure path used in production.


SSE vs WebSockets vs Polling

This is one of the most important architectural decisions.

ApproachDirectionConnectionGood For
PollingClient → Server repeatedlyShortSimple updates
Long PollingMostly server → clientRepeated HTTPOlder architectures
SSEServer → ClientLong-lived HTTPNotifications/live feeds
WebSocketBidirectionalPersistent socketChat/games/collaboration
ActionController::LiveDepends on implementationStreaming HTTPGeneric streaming

Use SSE when:

Server -> Browser

is the dominant requirement.

Examples:

Order status
Build progress
Notifications
Stock updates
Live dashboard
AI text streaming
Import progress

Use WebSockets when:

Server <-> Browser

needs continuous two-way communication.

Examples:

Chat
Multiplayer applications
Collaborative editing
Interactive sessions

Use normal HTTP when:

You simply need:

request -> response

There is no reason to introduce streaming complexity for an ordinary CRUD endpoint.


Connection Scalability Is Different

A normal HTTP request may live for:

100 ms
500 ms
2 seconds

An SSE connection may remain open for:

5 minutes
30 minutes
several hours

That changes your capacity model.

Suppose:

10,000 users

each maintain an SSE connection.

That means your infrastructure potentially needs to support:

10,000 long-lived connections

You therefore need to think about:

Web server capacity
Worker/thread usage
File descriptors
Load balancers
Reverse proxies
Timeout configuration
Connection limits
Memory
Monitoring

There is also a browser-level consideration: SSE uses persistent HTTP connections, and connection limits can matter especially under HTTP/1.1; HTTP/2 changes the connection model by multiplexing streams.


Be Careful with Active Record Connections

A particularly important Rails concern is database connection usage.

Consider:

loop do
users = User.where(active: true)
...
sleep 1
end

inside every SSE request.

If you have hundreds or thousands of clients, you can easily end up with poor database behavior.

A better architecture is usually:

            Event Producer
                 |
       +---------+---------+
       |                   |
     Redis              Broker
       |                   |
       +---------+---------+
                 |
            Rails SSE
                 |
              Browser

The SSE request should ideally wait for events, rather than continuously hammer the database.


A Better Production Architecture

For example, imagine an order-management application.

When an order changes:

Order updated
|
v
Publish "order.updated"
|
v
Redis / PubSub
|
v
SSE connection
|
v
Browser updates UI

The Rails controller becomes primarily responsible for:

Connection
↓
Subscribe
↓
Receive event
↓
Serialize event
↓
Write SSE
↓
Repeat

rather than:

Connection
↓
Query database
↓
Sleep
↓
Query database
↓
Sleep
↓
Query database

That distinction becomes very important at scale.


Testing an SSE Endpoint

A browser test is useful, but curl is often even more convenient during development.

For example:

curl -N http://localhost:3000/notifications

The -N option prevents curl from buffering output, making the stream easier to observe.

You should see events arrive progressively:

event: notification
id: 1
data: {"message":"Notification 1"}
event: notification
id: 2
data: {"message":"Notification 2"}

This is a very useful debugging technique.


Testing ActionController::Live

For controller tests, streaming requires more consideration than a typical controller action because the response is not necessarily generated as one complete body.

The key things to test are:

Content-Type
Event names
Event IDs
Payload format
Connection termination
Client disconnect handling
Error handling

For example, conceptually:

assert_equal "text/event-stream", response.media_type

and verify that the generated body contains expected SSE fields.

For more complex streaming behavior, integration/system-level testing is generally more valuable than testing only internal controller implementation details.


A Clean SSE Controller Pattern

For a production-style controller, I prefer keeping the controller small:

class EventsController < ApplicationController
  include ActionController::Live

  def index
    prepare_stream_headers

    sse = ActionController::Live::SSE.new(
      response.stream,
      retry: 3_000
    )

    event_stream.each do |event|
      sse.write(
        event.payload,
        event: event.type,
        id: event.id
      )
    end
  rescue ActionController::Live::ClientDisconnected
    Rails.logger.info("SSE client disconnected")
  ensure
    sse&.close
  end

  private

  def prepare_stream_headers
    response.headers["Content-Type"] = "text/event-stream"
    response.headers["Cache-Control"] = "no-cache"
  end

  def event_stream
    # Redis / PubSub / broker subscription
  end
end

The controller handles HTTP concerns, while the event source is delegated elsewhere.

That separation becomes especially valuable when the event system grows.


Advantages of ActionController::Live

Lower time-to-first-byte

The server can start sending data before the complete operation has finished.

Lower memory usage for large streams

You don’t necessarily need to construct the entire response in memory first.

Native HTTP

There is no requirement for a completely different networking protocol.

SSE is simple for browser clients

The browser already provides:

EventSource

Automatic SSE reconnect behavior

SSE includes protocol support for reconnecting and event IDs.

Fits naturally into Rails controllers

You can continue using Rails authentication, routing, controllers, and application services while introducing streaming only where needed.


Disadvantages

Streaming is not free.

Threading complexity

ActionController::Live executes the action in a separate thread.

Long-lived connections

Unlike conventional requests, connections may remain open for long periods.

Capacity planning becomes important

Thousands of connected browsers can have a very different infrastructure impact than thousands of short requests.

Reverse-proxy configuration matters

Buffering and timeout behavior can break an otherwise-correct implementation.

Database usage can become dangerous

Naive polling inside every streaming connection can put significant pressure on PostgreSQL.

Operational complexity

Logging, monitoring, disconnects, reconnects, retries, and infrastructure timeouts all become part of the design.


When Should a Rails Developer Use It?

A good decision rule is:

Do I need data before the complete response is available?
            |
           Yes
            |
            v
Does the client only need server -> browser updates?
            |
         +--+--+
         |     |
        Yes    No
         |      |
         v      v
       SSE    WebSocket

For generic data/file streaming:

ActionController::Live

For browser-facing event streams:

ActionController::Live::SSE

For ordinary request/response APIs:

render json:

is usually the better choice.


What a Senior Rails Developer Should Know Before Using It

Before introducing ActionController::Live, I would explicitly answer these questions:

1. How long will the connection remain open?

Seconds?

Minutes?

Hours?

2. How many simultaneous clients could exist?

100?

1,000?

100,000?

3. What is the event source?

Database?

Redis?

Kafka?

Another service?

4. What happens when the client disconnects?

Can the server stop work immediately?

5. How will reconnects work?

Will events be lost?

Do you need id and Last-Event-ID?

6. What happens behind the load balancer?

Does it buffer?

Does it timeout idle connections?

7. Is your code thread-safe?

Remember that Rails executes Live actions in a separate thread.

8. How will you monitor connections?

You should be able to answer:

How many active SSE connections exist?
How long have they been open?
How many disconnected unexpectedly?
How many events are being delivered?
What is the event delivery latency?

Final Example

A compact Rails 8.1 SSE implementation can look like this:

class EventsController < ApplicationController
  include ActionController::Live

  def stream
    response.headers["Content-Type"] = "text/event-stream"
    response.headers["Cache-Control"] = "no-cache"

    sse = ActionController::Live::SSE.new(
      response.stream,
      retry: 3_000
    )

    10.times do |i|
      sse.write(
        {
          message: "Event #{i + 1}",
          timestamp: Time.current.iso8601
        },
        event: "update",
        id: i + 1
      )

      sleep 1
    end
  rescue ActionController::Live::ClientDisconnected
    Rails.logger.info("Client disconnected")
  ensure
    sse&.close
  end
end

And the client:

const events = new EventSource("/events/stream");
events.addEventListener("update", event => {
const data = JSON.parse(event.data);
console.log(data.message);
});
events.onerror = error => {
console.error("Connection error", error);
};

This small example demonstrates the complete concept:

ActionController::Live
↓
HTTP streaming
↓
ActionController::Live::SSE
↓
text/event-stream
↓
Browser EventSource
↓
Real-time UI updates

Conclusion

ActionController::Live is Rails’ low-level mechanism for streaming HTTP responses while the controller is still producing them.

ActionController::Live::SSE builds on that mechanism to provide a convenient implementation of Server-Sent Events.

The most important distinction is:

Live = streaming mechanism
SSE = event-stream protocol

For modern Rails applications, this makes ActionController::Live particularly useful for large exports, progressive responses, logs, long-running operations, and AI output, while SSE is a strong fit for server-to-browser real-time updates.

But the real engineering challenge is usually not writing:

sse.write(...)

The difficult part is designing the surrounding system correctly:

Event source
↓
Concurrency
↓
Connection lifecycle
↓
Reconnect strategy
↓
Proxy/load-balancer behavior
↓
Database/resource usage
↓
Observability

That is where ActionController::Live moves from being a simple Rails API feature to a genuine production architecture decision.

References

Rails 8.1 ActionController::Live API: https://edgeapi.rubyonrails.org/classes/ActionController/Live.html

Rails 8.1 ActionController::Live::SSE API: https://api.rubyonrails.org/classes/ActionController/Live/SSE.html

Rails 8.1 release information:https://guides.rubyonrails.org/8_1_release_notes.html

MDN – Server-Sent Events and EventSource:

https://developer.mozilla.org/en-US/docs/Web/API/Server-sent_events/Using_server-sent_events

https://developer.mozilla.org/en-US/docs/Web/API/EventSource

Happy Implementing!

Ruby’s Mysterious Symbols: The Syntax Every Ruby Developer Should Truly Understand

Ruby is famous for making code expressive.

But that expressiveness comes with a side effect: Ruby contains quite a few symbols and syntax constructs that can look almost cryptic – even to experienced developers coming from other languages.

Consider this:

message = <<~TEXT
  Hello #{user.name},

  Your order has been shipped.

  Thanks!
TEXT

What exactly does <<~TEXT mean?

Or:

users.filter_map { _1.email if _1.active? }

What is _1?

Or:

case response
in { status: 200, body: String => body }
  puts body
end

Why does Ruby allow String =>>>> body inside a pattern?

These aren’t random pieces of syntax. They are examples of Ruby’s philosophy: make common programming operations concise without sacrificing readability.

This article explores some of Ruby 3.4’s most interesting “mysterious” syntax and more importantly explains what each construct means, why it exists, and when a senior developer should use it – or avoid it.


1. <<~ – The Squiggly Heredoc

Let’s start with one of the most useful Ruby syntax features.

message = <<~TEXT
  Hello World
    This is Ruby
  Goodbye
TEXT

The <<~ syntax is called a squiggly heredoc.

What is a heredoc?

A heredoc allows you to define a multiline string:

message = <<TEXT
Hello
World
TEXT

Ruby keeps the newlines inside the string.

The problem is indentation.

In real Ruby code, especially Rails applications, multiline strings are usually nested inside methods, classes, conditionals, etc.

Without squiggly heredoc:

def email_body
  <<TEXT
Hello,
Welcome to our application.
Thank you.
TEXT
end

The heredoc terminator often needs awkward indentation.

<<~ solves that

def email_body
  <<~TEXT
    Hello,
    Welcome to our application.
    Thank you.
  TEXT
end

Ruby removes the common leading indentation.

Conceptually:

source indentation
        ↓
    Hello
    Welcome
    Thank you

becomes:

Hello
Welcome
Thank you

Why is this useful in Rails?

Extremely useful for SQL:

sql = <<~SQL
  SELECT users.*
  FROM users
  INNER JOIN orders ON orders.user_id = users.id
  WHERE users.active = TRUE
SQL

Or HTML:

html = <<~HTML
  <div class="user">
    <h2>#{user.name}</h2>
  </div>
HTML

Or shell commands:

command = <<~BASH
  echo "Starting deployment"
  bundle exec rails db:migrate
  echo "Deployment complete"
BASH

The senior-level takeaway

<<~ isn’t merely a formatting convenience.

It lets the Ruby source code remain properly indented without contaminating the resulting string with that indentation.


2. <<- vs <<~ vs <<

Ruby actually has several heredoc variants.

<<TEXT
...
TEXT

Strict terminator placement.

<<-TEXT
...
  TEXT

Allows the terminator to be indented.

<<~TEXT
...
  TEXT

Allows indentation and removes common indentation from the resulting string.

So in modern Ruby code, <<~ is generally the most readable choice for indented multiline strings.

Read more here: https://railsdrop.com/ruby-more-about-ruby-hearedoc-questions-and-answers/


3. %i[...] – Creating Arrays of Symbols

This:

%i[admin editor viewer]

creates:

[:admin, :editor, :viewer]

Similarly:

%w[admin editor viewer]

creates:

["admin", "editor", "viewer"]

The % syntax is Ruby’s percent literal syntax.

Common forms

%w[one two three]     # strings
%i[one two three]     # symbols
%W[hello #{name}]     # interpolated strings
%I[hello #{name}]     # interpolated symbols

This:

%i[read write delete]

is often cleaner than:

[:read, :write, :delete]

Especially when the list becomes long:

ALLOWED_ROLES = %i[
  admin
  manager
  editor
  viewer
].freeze

Read more here: https://railsdrop.com/ruby-more-about-rubys-percent-literal-syntax/


4. &. – The Safe Navigation Operator

One of the most recognizable Ruby operators:

user&.profile&.address&.city

It means:

Call the next method only if the receiver isn’t nil.

Instead of:

if user
  if user.profile
    if user.profile.address
      user.profile.address.city
    end
  end
end

Ruby lets you write:

user&.profile&.address&.city

But don’t blindly use it

This is an important senior-level distinction.

If the business logic says:

A user must have a profile.

then this:

user&.profile&.address

may hide a data integrity problem.

Sometimes you actually want:

user.profile.address

so that invalid state fails loudly.

Good use

Optional data:

current_user&.avatar&.url

Potentially bad use

Required relationships:

order&.customer&.account&.billing_address

If all those associations are supposed to exist, safe navigation may simply hide broken application state.

Use &. when nil is genuinely expected – not merely because it prevents exceptions.


5. &:method – Symbol-to-Proc Conversion

You’ve probably seen:

users.map(&:email)

It looks strange initially.

It’s effectively shorthand for:

users.map { |user| user.email }

Ruby converts:

:email

into a callable block using &.

So:

users.map(&:email)

is approximately:

users.map { |user| user.email }

Another example

numbers.select(&:even?)

is equivalent to:

numbers.select { |number| number.even? }

Important distinction

These are not the same:

users.map(:email)

and:

users.map(&:email)

The & tells Ruby:

Convert this object into a Proc and pass it as the block.


6. _1, _2, _3 – Numbered Parameters

Modern Ruby provides implicit block parameters.

Instead of:

users.map { |user| user.email }

you can write:

users.map { _1.email }

_1 means:

The first block argument.

Similarly:

array.map { |value, index| ... }

can conceptually be accessed using:

_1
_2

For example:

[10, 20, 30].map { _1 * 2 }

produces:

[20, 40, 60]

Where it works well

Small transformations:

users.map { _1.email }
orders.select { _1.total >> 1000 }
names.map { _1.upcase }

Where it becomes bad

Complex blocks:

users.map { _1.orders.select { _2.paid? }.map { _1.total } }

At this point, explicit names are much easier to understand.

users.map do |user|
user.orders.select { |order| order.paid? }
.map { |order| order.total }
end

Senior Ruby code optimizes for comprehension, not character count.


7. ... – The Argument Forwarding Operator

Ruby’s ... is particularly useful when wrapping methods.

Consider:

def log(*args, **kwargs, &block)
puts "Calling method"
super
end

Modern Ruby allows forwarding arguments directly:

def log(...)
puts "Calling method"
super
end

The ... means:

Forward all positional arguments, keyword arguments, and the block.

For example:

def instrument(...)
  start = Process.clock_gettime(Process::CLOCK_MONOTONIC)

  result = super

  duration = Process.clock_gettime(Process::CLOCK_MONOTONIC) - start
  puts "Took #{duration}s"

  result
end

This is particularly valuable for decorators, wrappers, instrumentation and delegation.


8. * – The Splat Operator

Ruby’s * has several important meanings.

Array expansion

numbers = [1, 2, 3]
puts(*numbers)

is effectively:

puts(1, 2, 3)

Collecting arguments

def sum(*numbers)
numbers.sum
end

Now:

sum(1, 2, 3, 4)

works because numbers becomes:

[1, 2, 3, 4]

Array destructuring

first, *middle, last = [1, 2, 3, 4, 5]

results in:

first # 1
middle # [2, 3, 4]
last # 5

This makes * one of Ruby’s most versatile operators.


9. ** – Keyword Argument Splat

The double splat is the keyword-argument equivalent.

options = {
timeout: 10,
retries: 3
}
client.call(**options)

This expands the hash into keyword arguments.

And:

def connect(**options)
options
end

collects arbitrary keyword arguments.

connect(timeout: 10, retries: 3)

gives:

{
timeout: 10,
retries: 3
}

This becomes particularly important when building APIs, service objects and forwarding methods in modern Ruby.


10. =>>>> Is More Than Hash Syntax

Most Ruby developers first encounter:

{ name: "Abhilash" }

But =>>>> has several meanings.

Hash rockets

{ "name" =>> "Abhilash" }

Pattern matching

Ruby pattern matching also uses =>>>>.

case response
in { status: 200, body: String =>> body }
puts body
end

Here:

String =>> body

means roughly:

Match a String and bind the matched value to body.

This is part of Ruby’s increasingly powerful pattern matching system.


11. Ruby Pattern Matching with in

Ruby’s case statement can do structural matching.

case user
in { name:, role: "admin" }
  puts "#{name} is an admin"
else
  puts "Not an admin"
end

The pattern:

{ name:, role: "admin" }

means:

  • the object should have a name
  • role must equal "admin"
  • bind the name value to the local variable name

This is considerably more powerful than a traditional case comparison.

Array patterns

case coordinates
in [x, y]
  puts "Point: #{x}, #{y}"
end

Why senior developers should care

Pattern matching becomes useful when processing:

  • API responses
  • parsed JSON
  • AST structures
  • event payloads
  • command results
  • structured domain objects

Instead of writing nested conditionals, you can express the expected structure directly.


12. in vs if

Traditional Ruby:

if response.is_a?(Hash) &&
   response[:status] == 200
  ...
end

Pattern matching:

case response
in { status: 200 }
  ...
end

The second version communicates the shape of the data rather than manually checking each property.

That is the deeper value of pattern matching.


13. | – Destructuring and Pattern Alternatives

Ruby’s | isn’t only the bitwise OR operator.

In pattern matching:

case value
in 1 | 2 | 3
puts "Small number"
end

means:

Match 1 OR 2 OR 3.

This makes pattern matching expressive:

case status
in 200 | 201 | 204
puts "Success"
in 400 | 401 | 403
puts "Client error"
end

14. =>>>> in Pattern Matching Can Bind Values

Consider:

case result
in Integer =>> value
puts value
end

This performs a type match and binds the value.

For example:

result = 42

matches:

Integer =>> value

and:

value
# =>> 42

This becomes powerful when patterns become more complex.


15. ... in Ranges

Ruby’s range syntax has two forms:

1..10

and:

1...10

The difference:

1..10

includes 10.

1...10

excludes 10.

Therefore:

(1..10).to_a

gives:

[1,2,3,4,5,6,7,8,9,10]

while:

(1...10).to_a

gives:

[1,2,3,4,5,6,7,8,9]

This is especially useful for array slicing:

numbers[0...3]

returns the first three elements.


16. .. Can Be Used in Conditions

Ruby has another interesting use of ranges.

case number
when 1..10
  puts "Small"
when 11..100
  puts "Medium"
end

This is one reason Ruby ranges are more than simply “start/end values.”


17. =>>>> vs : in Hashes

These are both valid:

{ name: "Ruby" }

and:

{ :name =>> "Ruby" }

But modern Ruby generally prefers:

{ name: "Ruby" }

The hash rocket remains useful when keys aren’t symbols:

{
"Content-Type" =>> "application/json",
"X-Request-ID" =>> request_id
}

This is a good example of Ruby syntax evolving toward readability while retaining backwards compatibility.


18. ? and ! Are Part of Ruby’s API Design

Ruby method names can end with ?:

user.active?

This convention means:

The method answers a yes/no question.

Examples:

empty?
nil?
valid?
persisted?
published?

The ! convention usually communicates:

This method performs a more dangerous, mutating, or exceptional version of an operation.

Examples:

save!
update!
destroy!
compact!

But an important senior-level detail:

Ruby does not enforce the semantic meaning of !.

You can technically write:

def hello!
"hello"
end

The meaning is a convention established by Ruby developers.


19. :: – Constant Lookup and Method Calls

Most developers know:

User::NAME

But :: can also invoke methods:

object::method

although the . form is overwhelmingly more idiomatic for method calls.

The primary modern use is constant/module navigation:

ActiveRecord::Base
Rails::Application
JSON::ParserError

It communicates namespace traversal.


20. @, @@ and $

Ruby has several variable scopes represented visually.

Local variable

name = "Ruby"

Instance variable

@name = "Ruby"

belongs to an object instance.

Class variable

@@name = "Ruby"

is shared across a class hierarchy.

Global variable

$name = "Ruby"

is globally accessible.

From a senior Rails perspective:

Prefer local and instance variables. Be extremely cautious with class variables and globals.

For example, Rails applications rarely need:

@@configuration

or:

$global_state

because they introduce difficult-to-control shared state.


21. ||= – Lazy Initialization

This is everywhere in Ruby:

@client ||= Client.new

It means roughly:

@client = @client || Client.new

If @client is already truthy, Ruby keeps it.

Otherwise, it creates the object.

This is commonly used for memoization:

def expensive_service
@expensive_service ||= ExpensiveService.new
end

But remember

||= checks truthiness, not whether the variable has ever been assigned.

So if:

@value = false

then:

@value ||= calculate_value

will call calculate_value.

That distinction matters when memoizing boolean values.


22. &&= and ||= Are Assignment Operators

Ruby also supports:

value &&= other

and:

value ||= other

For example:

user.active &&= user.verified?

means approximately:

user.active = user.active && user.verified?

These are concise, but they should be used only when the resulting expression remains obvious.


23. +=, -=, *=, /=

Ruby supports compound assignment:

counter += 1

Conceptually:

counter = counter + 1

For object attributes:

user.score += 10

is conceptually equivalent to:

user.score = user.score + 10

Ruby’s expressive assignment syntax is one of the reasons its code can remain compact without introducing a separate statement syntax.


24. defined? – Ask Ruby Whether Something Exists

Ruby provides:

defined?(variable)

For example:

defined?(@user)

may return:

"instance-variable"

You can also inspect constants:

defined?(Rails)

This can be useful for metaprogramming and conditional loading, although it should not be used as a substitute for proper application design.


25. respond_to? – Duck Typing in Action

Ruby’s duck typing philosophy often appears as:

object.respond_to?(:call)

Instead of asking:

object.is_a?(SomeSpecificClass)

you ask:

Can this object perform the operation I need?

For example:

if logger.respond_to?(:info)
logger.info("Processing started")
end

This is particularly useful when designing flexible Ruby APIs.


26. method(:foo) – Turn a Method into an Object

Ruby treats methods as objects through Method:

method = user.method(:email)

Then:

method.call

invokes it.

This is useful in metaprogramming and dynamic dispatch.

For example:

operation = object.method(:calculate)
operation.call

Ruby’s object model makes this possible without requiring a separate function-pointer concept.


27. public_send vs send

Ruby allows dynamic method invocation:

user.send(:email)

But send can invoke private methods.

For user-controlled or externally supplied method names, this can be dangerous.

Prefer:

user.public_send(:email)

when you intentionally want to restrict invocation to public methods.

This distinction becomes important when building generic service layers or DSLs.


28. then / yield_self – Pipeline-Style Ruby

Ruby provides:

object.then do |value|
...
end

For example:

result =
User.new
.then { |user| user.save! }
.then { |user| user.email }

then passes the receiver into the block and returns the block’s result.

It can be useful when constructing transformations without introducing temporary variables.

But don’t turn everything into a pipeline merely because Ruby allows it.


29. _ – The Intentionally Ignored Variable

You’ll frequently see:

users.each do |user, _index|
puts user.name
end

The _ communicates:

This value exists, but I intentionally don’t care about it.

Ruby also allows:

_ = expensive_result

although explicit naming is generally preferable unless you’re intentionally ignoring something.


30. Endless Method Definitions

Ruby allows:

def full_name = "#{first_name} #{last_name}"

instead of:

def full_name
"#{first_name} #{last_name}"
end

This is called an endless method definition.

It’s excellent for very small methods:

def active? = status == "active"
def total = price * quantity

But don’t use it for complex logic.

This:

def process = validate && save && notify && publish

may be syntactically elegant but is much harder to maintain.


31. =>>>> – Rightward Assignment

Modern Ruby also supports rightward assignment:

value =>> variable

For example:

"hello" =>> message

Now:

message
# =>> "hello"

This becomes particularly interesting with pattern matching:

response =>> { status:, body: }

It allows destructuring and binding in a visually different direction.

The feature is useful, but like many Ruby syntactic conveniences, it should be used when it improves readability—not simply because it is available.


32. The Bigger Picture: Ruby Syntax Is a Language of Intent

After seeing all these operators, it is tempting to memorize them as a collection of Ruby tricks.

That would miss the important point.

Ruby’s syntax frequently tries to encode intent.

Compare:

users.map { |user| user.email }

with:

users.map(&:email)

The second says:

Transform each user using its email method.

Compare:

if user && user.profile && user.profile.avatar

with:

user&.profile&.avatar

The second says:

Traverse this optional object graph.

Compare:

message = <<~TEXT
...
TEXT

with manually concatenating strings.

The first says:

This is a multiline piece of text.

And:

case response
in { status: 200, body: String =>> body }

says:

I expect this particular structure.

That is the real power behind Ruby’s “mysterious symbols.”


33. Senior Ruby Developer Rule: Don’t Optimize for Cleverness

A senior Ruby developer should know all of these constructs.

But knowing them doesn’t mean using them everywhere.

For example:

users.map { _1.orders.select(&:paid?).sum(&:total) }

is valid Ruby.

But:

users.map do |user|
  user.orders
      .select(&:paid?)
      .sum(&:total)
end

may be more readable.

And sometimes the best version is:

users.map do |user|
  paid_orders = user.orders.select(&:paid?)
  paid_orders.sum(&:total)
end

Ruby gives you enormous freedom.

Good Ruby isn’t the shortest Ruby.

Good Ruby is code where another experienced developer can understand the intent quickly.


Final Takeaway

Ruby 3.4 contains a rich collection of compact syntax:

<<~TEXT       # squiggly heredoc
%i[...]       # symbol array
%w[...]       # string array
&.            # safe navigation
&:method      # symbol-to-proc
_1            # numbered parameter
*args         # positional splat
**kwargs      # keyword splat
...           # argument forwarding
1...10        # exclusive range
x ||= value   # conditional assignment
def foo = ... # endless method
case x; in... # pattern matching
=>            # hash rocket / pattern binding / rightward assignment

These aren’t merely Ruby “shortcuts.”

They represent Ruby’s broader design philosophy:

Make the code express what the programmer means, while keeping the syntax close to natural language.

For a senior Ruby/Rails developer, the goal isn’t to remember every symbol.

The goal is to recognize when a piece of Ruby syntax improves the expression of intent – and when it merely makes the code clever.

That distinction is what separates knowing Ruby syntax from writing idiomatic, maintainable Ruby.

Happy Rubying!~

Rails Database Transactions: A Senior Developer’s Guide to Atomicity, Rollbacks, Savepoints and Transaction-Safe Design

Database transactions are one of those Rails features that appear simple:

User.transaction do
  # database operations
end

But at a senior Rails engineering level, transactions are much more than wrapping a few save! calls in a block.

They affect data consistency, concurrency, failure handling, callbacks, database locking, nested service objects, multiple databases and even how external systems should be triggered.

A strong Rails developer should understand not only how to start a transaction, but also:

  • which transaction API to use
  • how class-level and instance-level transactions differ
  • what actually gets rolled back
  • how nested transactions work
  • when requires_new is necessary
  • how savepoints work
  • how save and destroy already use transactions internally
  • how after_commit differs from after_save
  • how to handle database exceptions safely
  • how transactions interact with locks and isolation levels
  • what Rails transactions cannot protect
  • how to design transaction boundaries in service objects

This article approaches transactions from that perspective.


What Is a Database Transaction?

A transaction groups multiple database operations into a single unit of work.

Conceptually:

BEGIN

operation 1
operation 2
operation 3

COMMIT

If something fails:

BEGIN

operation 1
operation 2
operation 3  <-- failure

ROLLBACK

The important property is atomicity:

Either all database changes become permanent, or none of them do.

Rails uses the database transaction facilities provided by the underlying database connection. Active Record describes transactions as protective blocks where SQL statements become permanent only when the complete operation succeeds. (https://api.rubyonrails.org/v7.2.3/classes/ActiveRecord/Transactions/ClassMethods.html)

A classic example is transferring money:

Account.transaction do
  sender.withdraw!(100)
  receiver.deposit!(100)
end

We don’t want this situation:

sender: -100
receiver: 0

If the deposit fails, the withdrawal must also disappear.


The Basic Rails Transaction Block

The most common syntax is:

ActiveRecord::Base.transaction do
  user.save!
  profile.save!
  audit_log.save!
end

If any operation raises an exception, Rails rolls back the transaction.

In a modern Rails application, however, I generally prefer:

ApplicationRecord.transaction do
  user.save!
  profile.save!
  audit_log.save!
end

Why?

ApplicationRecord represents the application’s Active Record hierarchy and is generally a clearer boundary than directly referencing ActiveRecord::Base.


Why Do We Need Transactions?

Imagine an order creation workflow:

order = Order.create!
payment = Payment.create!
order.update!(status: "paid")
InventoryItem.create!(...)

Without a transaction, failure halfway through could leave:

Order ✅
Payment ✅
Order paid ✅
Inventory ❌

The application is now inconsistent.

Instead:

ApplicationRecord.transaction do
  order = Order.create!
  payment = Payment.create!

  order.update!(status: "paid")

  InventoryItem.create!
end

Now the desired guarantee is:

Everything succeeds  -> COMMIT
Anything fails       -> ROLLBACK

Class-Level Transaction Methods

The class-level form is the most common Rails API.

User.transaction do
  user = User.create!
  profile = Profile.create!(user: user)
end

You can also use:

ApplicationRecord.transaction do
  user.update!
  profile.update!
end

An important senior-level detail is that the class calling .transaction doesn’t restrict which models can participate.

For example:

Account.transaction do
  account.update!(balance: 900)

  TransactionLog.create!(
    account: account,
    amount: 100
  )
end

TransactionLog participates in the same transaction.

Why?

Because a Rails transaction is fundamentally associated with a database connection, not with a particular model class.

This is an important distinction:

Transaction
    ↓
Database connection
    ↓
SQL statements
    ↓
Multiple ActiveRecord models

Not:

Transaction
    ↓
One ActiveRecord model only

Instance-Level Transactions

Rails also supports transactions on model instances.

For example:

user.transaction do
  user.update!(name: "Abhilash")
  Profile.create!(user: user)
end

This might look like a different mechanism from:

User.transaction do
  user.update!(name: "Abhilash")
  Profile.create!(user: user)
end

For normal Active Record usage, they operate against the same underlying database connection.

Rails explicitly provides transaction as both a class-level and model-instance API. (https://api.rubyonrails.org/v7.2.3/classes/ActiveRecord/Transactions/ClassMethods.html)

When is instance-level useful?

It can communicate intent:

order.transaction do
  order.update!(status: "processing")
  order.create_payment!
end

This reads naturally as:

Perform these operations as one transaction around this order.

However, I would usually use the class-level transaction in service objects, because the service boundary is about a unit of work rather than a specific model.


Service Object Transaction Boundary

This is usually my preferred architecture for complex workflows.

class CheckoutService
  def call(user:, cart:)
    Order.transaction do
      order = create_order(user, cart)
      charge_payment(order)
      reserve_inventory(order)

      order.update!(status: "confirmed")

      order
    end
  end

  private

  def create_order(user, cart)
    Order.create!(
      user: user,
      total: cart.total
    )
  end

  def charge_payment(order)
    Payment.create!(
      order: order,
      amount: order.total
    )
  end

  def reserve_inventory(order)
    # ...
  end
end

This gives the workflow one explicit transaction boundary.

That is much easier to reason about than having every individual method start its own transaction.


save and destroy Are Already Transactional

This is an area that surprises many developers.

Rails automatically wraps save and destroy operations in transactions. This ensures validations and callbacks execute under transactional protection. (https://api.rubyonrails.org/v7.2.3/classes/ActiveRecord/Transactions/ClassMethods.html)

For example:

user.save!

is already transaction-protected at the database-operation level.

But that doesn’t mean you don’t need explicit transactions.

Consider:

user.save!
profile.save!

Each operation is protected individually.

That does not give you:

user + profile = atomic unit

You need:

User.transaction do
  user.save!
  profile.save!
end

So the distinction is:

save!
  ↓
protect this persistence operation

transaction do
  ↓
protect this entire workflow

Transaction and Exceptions

The normal rollback mechanism is an exception.

User.transaction do
  user.save!
  profile.save!

  raise "Something failed"
end

The transaction rolls back.

Rails then propagates the exception to the caller.

That means this pattern is common:

begin
  User.transaction do
    create_user!
    create_profile!
  end
rescue StandardError => e
  Rails.logger.error(e.message)
  raise
end

The important design principle is:

Don’t use transactions as a replacement for error handling.

A transaction determines what happens to database state.

Your application code still needs to determine what happens to the failure.


ActiveRecord::Rollback

Rails provides a special exception:

ActiveRecord::Rollback

Example:

User.transaction do
  user.update!(status: "processing")

  unless payment_valid?
    raise ActiveRecord::Rollback
  end

  user.update!(status: "confirmed")
end

The transaction rolls back, but ActiveRecord::Rollback is specifically handled by Rails and isn’t propagated like a normal exception. (Ruby on Rails API)

This makes it useful when you intentionally want:

rollback database changes
+
don't treat this as an application exception

For example:

Order.transaction do
  order.update!(status: "processing")

  raise ActiveRecord::Rollback unless inventory_available?
end

raise vs ActiveRecord::Rollback

Compare:

raise PaymentError

with:

raise ActiveRecord::Rollback

The semantic difference is significant.

Normal exception

raise PaymentError

Result:

ROLLBACK
↓
exception propagates
↓
caller can rescue it

ActiveRecord::Rollback

raise ActiveRecord::Rollback

Result:

ROLLBACK
↓
rollback is internally handled
↓
execution exits transaction

Therefore, don’t blindly replace business exceptions with ActiveRecord::Rollback.


Nested Transactions

Consider:

ApplicationRecord.transaction do
  user.save!

  ApplicationRecord.transaction do
    profile.save!
  end
end

You might assume there are two independent transactions:

BEGIN
user
BEGIN
profile
COMMIT
COMMIT

That’s not generally how Rails works.

By default, a nested transaction joins the existing transaction. Most databases don’t provide true nested transactions, so Rails emulates subtransactions with savepoints where necessary. (Ruby on Rails API)

Conceptually:

BEGIN
user
profile
COMMIT

The Nested Rollback Surprise

Consider this:

User.transaction do
User.create!(name: "A")
User.transaction do
User.create!(name: "B")
raise ActiveRecord::Rollback
end
end

Many developers expect:

A -> committed
B -> rolled back

But because the nested transaction joins the parent transaction, the rollback exception is handled by the inner transaction boundary and the outer transaction can still commit.

The result can be:

A -> committed
B -> committed

This behavior is documented by Rails and is one of the most important transaction gotchas to understand. (Ruby on Rails API)

requires_new: true

When you need an actual nested transactional boundary, use:

requires_new: true

Example:

ApplicationRecord.transaction do
user = User.create!
ApplicationRecord.transaction(requires_new: true) do
AuditLog.create!
raise ActiveRecord::Rollback
end
end

Now the inner transaction gets its own savepoint.

Conceptually:

BEGIN
User
SAVEPOINT
AuditLog
ROLLBACK TO SAVEPOINT
COMMIT

Result:

User ✅
AuditLog ❌

Rails uses database save points to emulate nested transactions on databases that do not support true nested transactions.


When Should You Use requires_new?

It is especially useful when you have an inner operation that should be isolated from the outer workflow.

For example:

Order.transaction do
create_order!
Order.transaction(requires_new: true) do
create_optional_audit_record!
end
finalize_order!
end

The inner operation can fail without necessarily destroying the outer work.

This is particularly useful in reusable service objects.

Suppose:

class AuditService
def self.record!(event)
AuditLog.transaction(requires_new: true) do
AuditLog.create!(event: event)
end
end
end

That service can be called either:

AuditService.record!("user_created")

or inside another transaction:

User.transaction do
user.save!
AuditService.record!("user_created")
end

The requires_new boundary gives the service an explicit savepoint when called inside an existing transaction.


Transaction Isolation Levels

Transactions don’t only provide atomicity.

They also influence how concurrent transactions can see and modify data.

Rails allows:

Account.transaction(isolation: :serializable) do
# critical operation
end

Supported isolation levels include:

:read_uncommitted
:read_committed
:repeatable_read
:serializable

Support and semantics depend on the database adapter. Rails documents these options and notes that isolation cannot generally be changed while joining an existing transaction or creating a nested savepoint transaction.

For example:

Order.transaction(isolation: :serializable) do
order = Order.find(order_id)
order.update!(
status: "confirmed"
)
end

This can be appropriate for highly concurrent business operations, but it isn’t something I would enable casually.

Higher isolation can increase contention and retry requirements.

A senior engineer should ask:

What consistency guarantee does this business operation actually require?

rather than:

Which isolation level sounds safest?


Transactions + Row Locking

Transactions become particularly powerful when combined with pessimistic locking.

Suppose two requests attempt to update the same account simultaneously.

account.with_lock do
account.update!(
balance: account.balance - 100
)
end

with_lock is a useful Rails shortcut: it starts a transaction, reloads the record using a row lock, and then executes the block. Rails also allows transaction options such as requires_new, isolation, and joinable to be passed to with_lock. (Ruby on Rails API)

Conceptually:

BEGIN
SELECT ... FOR UPDATE
modify row
COMMIT

This is useful for operations such as:

account.with_lock do
raise InsufficientFunds unless account.balance >= amount
account.update!(
balance: account.balance - amount
)
end

The important point is that transaction + locking solves a different class of problem from transaction alone.

A transaction provides atomicity.

A lock helps control concurrent access.

with_lock vs transaction

Compare:

account.transaction do
account.update!(balance: ...)
end

with:

account.with_lock do
account.update!(balance: ...)
end

The first provides transactional atomicity.

The second provides:

transaction
+
record reload
+
row-level locking

Use with_lock when concurrency around a particular row is part of the problem.

after_save vs after_commit

This distinction becomes extremely important when transactions are involved.

Consider:

class Order < ApplicationRecord
after_save :publish_order
def publish_order
EventBus.publish(id)
end
end

Suppose:

Order.transaction do
order.update!(status: "paid")
raise "Something failed"
end

The after_save callback can run while the transaction is still in progress.

The database transaction can subsequently roll back.

Now your external system might have received:

Order paid

while your database says:

Order unpaid

That’s dangerous.


Use after_commit for External Side Effects

Rails provides:

class Order < ApplicationRecord
after_commit :publish_order
private
def publish_order
EventBus.publish(id)
end
end

Now the external operation happens only after the database transaction has successfully committed.

Rails explicitly recommends transaction callbacks such as after_commit when interacting with systems outside the database transaction. (Ruby on Rails Guides)

For narrower cases:

after_create_commit :publish_order
after_update_commit :publish_order
after_destroy_commit :remove_from_search

These are convenient aliases provided by Rails.


Per-Transaction Callbacks

Modern Rails also allows callbacks to be registered directly against a transaction.

For example:

Order.transaction do |transaction|
order.update!(status: "confirmed")
transaction.after_commit do
NotificationService.notify_order_confirmed(order)
end
end

This is interesting because the callback is associated with the unit of work, rather than with the model lifecycle.

Rails supports transaction-level callbacks such as:

transaction.before_commit
transaction.after_commit
transaction.after_rollback

This can be cleaner for domain/service-oriented workflows where you don’t want the model itself to know about notification behavior.


ActiveRecord.after_all_transactions_commit

Another useful modern Rails API is:

ActiveRecord.after_all_transactions_commit do
NotificationService.notify(...)
end

This is useful when code may be invoked from either inside or outside a transaction.

Rails guarantees that the callback runs after all currently open transactions have successfully committed. If any transaction rolls back, the callback isn’t executed.

This can be particularly useful in reusable application services.


Article.current_transaction

Modern Rails exposes transaction state through:

Article.current_transaction

You can register an operation:

Article.current_transaction.after_commit do
SearchIndexer.index(article)
end

This makes a service transaction-aware without requiring it to know whether its caller has opened a transaction.

Rails documents this API as a representation of the current transaction, savepoint, or lack of an active transaction. (Ruby on Rails API)

This is particularly interesting for reusable service objects.

For example:

class PublishArticle
def self.call(article)
article.update!(published: true)
Article.current_transaction.after_commit do
SearchIndexer.index(article)
end
end
end

Now:

PublishArticle.call(article)

works both:

outside transaction

and:

Article.transaction do
PublishArticle.call(article)
end

The external action can correctly follow the transaction boundary.


Don’t Rescue StatementInvalid Inside a Transaction

This is one of the most important PostgreSQL-specific transaction rules.

Bad:

User.transaction do
begin
User.create!(email: "existing@example.com")
rescue ActiveRecord::StatementInvalid
# ignore
end
User.create!(email: "new@example.com")
end

A database error such as a unique constraint violation can leave the PostgreSQL transaction in an aborted state.

After that, subsequent SQL statements can fail with an error similar to:

current transaction is aborted,
commands ignored until end of transaction block

Rails explicitly recommends restarting the entire transaction after ActiveRecord::StatementInvalid, rather than continuing within the damaged transaction.

Better:

begin
User.transaction do
create_user!
create_profile!
end
rescue ActiveRecord::RecordNotUnique
# retry or handle outside the transaction
end

The key idea is:

Database failure
↓
Transaction may be unusable
↓
Exit transaction
↓
Handle/retry outside it

This is especially important when building retry logic for concurrency errors.


Transactions Are Not Distributed Transactions

A Rails transaction normally operates on one database connection.

Therefore:

User.transaction do
user.save!
AuditLog.create!
end

works when those models participate in the same database connection.

But imagine:

Primary DB
User
Analytics DB
AnalyticsEvent

A transaction on the primary database cannot automatically roll back a transaction on another database connection.

Rails explicitly documents that transactions are not distributed across database connections.

This becomes especially important with Rails multiple-database applications.


Multiple Databases: Don’t Assume One Transaction

Imagine:

User.transaction do
user.update!
AnalyticsEvent.transaction do
analytics_event.save!
end
end

These are potentially separate database transactions.

You don’t suddenly have:

BEGIN DB1
BEGIN DB2
COMMIT DB1
COMMIT DB2

with a globally atomic guarantee.

Instead, you have two independent database resources.

This is where architectural patterns such as:

  • transactional outbox
  • event-driven processing
  • retries
  • idempotency
  • compensating actions

become more appropriate than trying to force a distributed transaction.


Transactions and Background Jobs

Consider:

Order.transaction do
order.update!(status: "confirmed")
OrderConfirmationJob.perform_later(order.id)
end

This can be dangerous.

Depending on timing, the job could execute before the surrounding transaction has committed.

Then the worker might query:

Order.find(order_id)

and not observe the expected committed state.

Instead:

Order.transaction do
order.update!(status: "confirmed")
order.after_commit do
OrderConfirmationJob.perform_later(order.id)
end
end

Or use the appropriate transactional callback mechanisms.

The principle is:

Don’t allow asynchronous consumers to depend on database state that hasn’t committed yet.

Rails’ transaction callbacks are specifically designed for such post-commit work.


Keep Transactions Small

A transaction should generally cover the minimum amount of work necessary.

Avoid:

Order.transaction do
order.update!
HTTP.get(payment_api)
HTTP.get(shipping_api)
expensive_calculation
sleep(5)
order.update!
end

Now the database transaction stays open while waiting on external systems.

That can mean:

transaction open
↓
database connection occupied
↓
locks potentially held
↓
other requests wait
↓
throughput decreases

A better architecture is often:

external preparation
↓
short DB transaction
↓
commit
↓
after_commit / job
↓
external side effect

Transaction Boundary vs Business Operation

A useful senior-level rule is:

A transaction boundary should normally correspond to a business operation that must be atomic.

For example:

Order.transaction do
create_order!
reserve_inventory!
record_payment!
end

That’s a meaningful transaction.

But this:

User.transaction do
user.update!
end

may be unnecessary if you’re only performing one persistence operation.

Remember:

user.update!

already has transactional protection around the persistence operation.


Testing Transaction Behavior

Transactions are especially valuable to test explicitly.

Example:

it "rolls back the order when payment fails" do
expect {
CheckoutService.call(user, cart)
}.to raise_error(PaymentError)
expect(Order.count).to eq(0)
end

Test the business guarantee, not the implementation detail.

Good transaction tests answer questions such as:

Does failed payment rollback the order?
Does failed inventory reservation rollback the payment?
Does an after_commit job run only after successful commit?
Does a nested requires_new operation rollback independently?

A Practical Senior-Level Example

Let’s build a realistic checkout flow.

class CheckoutService
  def call(user:, cart:)
    order = nil

    Order.transaction do
      order = Order.create!(
        user: user,
        total: cart.total,
        status: "pending"
      )

      reserve_inventory!(cart)

      Payment.create!(
        order: order,
        amount: cart.total,
        status: "paid"
      )

      order.update!(status: "confirmed")

      ActiveRecord::after_all_transactions_commit do
        OrderConfirmationJob.perform_later(order.id)
      end
    end

    order
  end

  private

  def reserve_inventory!(cart)
    cart.items.each do |item|
      item.product.with_lock do
        raise OutOfStock if item.product.stock < item.quantity

        item.product.update!(
          stock: item.product.stock - item.quantity
        )
      end
    end
  end
end

There are several senior-level ideas here.

Atomicity

Order.transaction

ensures the order, payment and inventory changes form one unit.

Concurrency control

with_lock

protects inventory from concurrent updates.

Post-commit processing

ActiveRecord.after_all_transactions_commit

prevents the job from being dispatched before the transaction chain is complete.

This is much closer to production-grade transaction design than simply knowing:

Model.transaction do
end

Transaction APIs at a Glance

APIMain purposeTypical usage
Model.transactionTransaction around a unit of workService objects
instance.transactionTransaction associated with a model instanceModel-centric workflows
ApplicationRecord.transactionApplication-wide transaction boundaryShared models
transaction(requires_new: true)Independent nested savepointIsolating sub-operations
transaction(isolation: :serializable)Stronger concurrency guaranteesHighly concurrent workflows
with_lockTransaction + row lockBalance/inventory updates
after_commitRun code after commitExternal side effects
after_rollbackReact to rollbackCleanup/recovery logic
transaction.after_commitCallback attached to a specific transactionService/domain workflows
ActiveRecord.after_all_transactions_commitRun after outermost transaction chain commitsTransaction-aware reusable services
current_transaction.after_commitMake services transaction-awareReusable domain services

Rails provides all of these around the same fundamental transaction system.


How I Decide Which API to Use

As a practical decision tree:

One database operation

Usually:

user.update!

No explicit transaction required.

Several operations must succeed together

Use:

User.transaction do
...
end

Reusable service may be called inside another transaction

Consider:

transaction(requires_new: true)

when independent rollback semantics are actually required.

Concurrent modification of one row

Use:

record.with_lock do
...
end

External system must run only after DB success

Use:

after_commit

or a transaction-aware post-commit mechanism.

Multiple database connections

Don’t assume a single transaction protects everything.

Consider:

outbox
events
idempotency
retries
compensating actions

instead.


Common Transaction Mistakes

1. Putting HTTP calls inside transactions

Order.transaction do
order.save!
PaymentGateway.charge!
end

Avoid long-running external calls inside database transactions.

2. Assuming nested transactions are independent

transaction do
transaction do
end
end

The inner block normally participates in the outer transaction.

Use:

transaction(requires_new: true)

when you specifically need savepoint-based isolation.

3. Publishing events from after_save

Bad:

after_save :publish_event

for external systems that require committed data.

Prefer:

after_commit :publish_event

4. Rescuing database errors inside the transaction

Bad:

transaction do
begin
risky_database_operation
rescue ActiveRecord::StatementInvalid
end
another_database_operation
end

For PostgreSQL in particular, leave the failed transaction and retry/recover at a higher level.

5. Assuming transactions protect in-memory Ruby objects

Suppose:

user = User.find(1)
User.transaction do
user.update!(name: "New Name")
raise ActiveRecord::Rollback
end

The database row is rolled back.

But don’t assume your Ruby object has magically reverted every piece of in-memory state to its pre-transaction state. Rails explicitly notes that database rollback doesn’t restore Active Record objects to their original in-memory state.


Rails Takeaways

The important lesson isn’t:

“Use .transaction when you have multiple saves.”

The deeper mental model is:

                 Transaction
│
┌───────────┴───────────┐
│ │
Atomicity Concurrency
│ │
commit/rollback locks/isolation
│ │
└───────────┬───────────┘
│
Application
boundary
│
┌───────────┴────────────┐
│ │
DB operations external systems
│ │
transaction after_commit

A senior Rails developer should decide transaction boundaries deliberately.

The questions I would ask during a code review are:

What exactly must be atomic?
Which database connection is involved?
Can this service be called inside another transaction?
Does this nested transaction really need requires_new?
Are we holding locks longer than necessary?
Could a database constraint failure leave the transaction unusable?
Are we calling an external service before commit?
Can a background job observe uncommitted data?
Are multiple databases involved?
Do we need a lock, or is a transaction alone sufficient?
What happens when this operation is executed concurrently?

That is where transaction knowledge moves from Rails syntax to system design.


Final Mental Model

Think about Rails transactions in five layers:

1. transaction
↓
Atomic unit of database work
2. rollback
↓
Undo database changes when work fails
3. requires_new / savepoints
↓
Isolate nested database work
4. locks / isolation
↓
Control concurrent behavior
5. after_commit
↓
Safely interact with the world outside the DB

Mastering these five concepts gives you most of what you need to design transaction-safe Rails applications.

And the biggest senior-level principle is simple:

Transactions should protect business invariants, not merely surround database code.

That distinction is what separates knowing the Rails transaction API from designing reliable transactional systems.

References

  • Rails Active Record Transactions API and transaction semantics. (Ruby on Rails API)
  • Rails transaction callbacks, after_commit, after_rollback, per-transaction callbacks, and after_all_transactions_commit. (Ruby on Rails Guides)
  • Rails ActiveRecord::Transaction API, including transaction-aware callbacks and current_transaction. (Ruby on Rails API)
  • Rails pessimistic locking and with_lock. (Ruby on Rails API)

Happy Implementing!

Ruby’s Triple-Dot Operator: Argument Forwarding from 2.7 to 4.0

If you’ve ever written a method whose entire job is to pass its arguments straight through to another method, you’ve felt this pain:

class Repository
def find(id, *args, **kwargs, &block)
connection.find(id, *args, **kwargs, &block)
end
end

Three parameter types, three splat operators, zero information conveyed. Ruby 2.7 solved this with a single token: ...

The problem it solves

... is Ruby’s argument forwarding shorthand. It captures everything passed to a method – positional args, keyword args, and a block – and lets you re-throw it at another method without naming a single one of them.

def find(...)
connection.find(...)
end

Same behavior as the splat version above, minus the noise. It behaves like a bare super with parens: “take what I got, send it onward, unchanged.”

Ruby 2.7: the baseline

... shipped in Ruby 2.7 (Dec 2019) with one hard restriction: it has to be the only parameter in the definition, and the only argument in the call. You can’t mix it with named params, and you can’t inspect or transform the forwarded values.

def log_call(...)
puts "calling..."
perform(...)
end
def perform(*args, **kwargs, &block)
block.call(args, kwargs)
end
log_call(1, 2, k: 3) { |a, k| p [a, k] }
# => [[1, 2], {k: 3}]

Clean, but rigid – useful only for pure pass-through wrappers (logging, memoization, decorators).

Ruby 3.0: leading arguments

Ruby 3.0 (Dec 2020) lifted the “must be alone” rule. You can now peel off one or more leading positional arguments before the ..., in both the definition and the call site:

def method_missing(name, ...)
send(:"do_#{name}", ...)
end

This is the textbook use case – method_missing needs the method name for dispatch logic, but everything else should flow through untouched:

def transform(a, ...)
process(a, ...)
end
def process(a, *args, **kwargs, &block)
[a, args, kwargs]
end
transform(1) # => [1, [], {}]
transform(1, 2, k: 3) # => [1, [2], {k: 3}]

This turned ... from a niche decorator trick into something you’d actually reach for in delegation-heavy code – Rails controllers forwarding to services, DSL builders, proxy objects.

Ruby 3.1: anonymous block forwarding

Ruby 3.1 (Dec 2021) split the block piece out on its own. If you only need to forward the block and want the positional/keyword args handled explicitly, use a bare &:

def perform(&)
execute(&)
end

No name required on either side. This composes with regular named params:

def retry_with(times:, &)
times.times { execute(&) }
end

Ruby 3.2: anonymous splat and double-splat

Ruby 3.2 (Dec 2022) completed the set, adding anonymous * and ** forwarding to match the anonymous & from 3.1:

def split_arguments(*, **)
pass_positional(*) # forwards only positional args
pass_keywords(**) # forwards only keyword args
end
split_arguments(1, 2, a: 3, b: 4)
# pass_positional(1, 2)
# pass_keywords(a: 3, b: 4)

This matters when a method needs to route positional and keyword args to different destinations – ... can’t do that, since it moves as one atomic bundle.

Ruby 3.3 / 3.4 / 4.0: no new syntax, better tooling

No further language changes landed for ... itself through 3.3, 3.4, or Ruby 4.0 (released Dec 2025). Two things worth knowing if you’re on current Ruby:

  • RBS gained first-class support for forwarding parameters in method type signatures in 2026 (def request: (...) -> Response), so type-checked codebases no longer have to erase forwarded signatures to untyped.
  • Ruby 4.0 changed splat semantics slightly: *nil no longer calls nil.to_a, and **nil no longer calls nil.to_hash. It’s not a ...-specific change, but if you forward keyword args that might legitimately be nil (e.g., **opts where opts defaults to nil), check this – it’ll raise instead of silently treating nil as {}.

Version cheat sheet

VersionReleasedAdds
2.7Dec 2019... – forwards all args + block, must be the sole parameter
3.0Dec 2020Leading arguments alongside ...: def foo(a, ...)
3.1Dec 2021Anonymous block forwarding: def foo(&); bar(&); end
3.2Dec 2022Anonymous splat/double-splat: def foo(*, **); bar(*); baz(**); end
3.3 – 4.02023 – 2025No new ... syntax; RBS forwarding types; *nil/**nil semantics changed in 4.0

If you’re targeting older runtimes: 2.7 and 3.0 are long past EOL, 3.1 EOL’d in 2025, and only 3.2+ receives active support as of this writing. Practically, any codebase forwarding arguments today should assume 3.2+ and use whichever granularity (..., &, *, **) fits the delegation.

Where I’d push back on using it

... is DRY, but it’s opaque. def foo(...) tells a reader nothing about the method’s actual contract – they have to chase the call chain to find out what foo accepts. For a pure pass-through utility (logging wrapper, method_missing dispatch, a thin repository shim), that opacity is the whole point and it’s the right call. For a public API boundary – a service object’s entry point, a gem’s documented interface – I’d argue explicit named parameters (or at minimum RBS/Sorbet signatures) win, because the signature is the documentation, and ... erases it at the exact place callers look first.

A second edge case: you can’t currently pass extra trailing arguments after a forwarded ... in a call (bar(extra, ...) is still restricted) – only leading ones. If you need to inject an argument after the forwarded set, you’re back to explicit *args, **kwargs, &block.

Rule of thumb: reach for ... (or &/*/**) at internal delegation boundaries where the wrapper genuinely adds no new arguments of its own. Keep explicit signatures at any boundary another engineer – or a type checker – needs to reason about without reading the delegate.

Happy Rubying!

What is an Enterprise Software – how it is differ from normal web applications

An enterprise web application is a large-scale web application built to support the operations, workflows, and business processes of an organization (enterprise/company).

These applications are usually:

  • Used by many employees, customers, vendors, or partners
  • Connected with databases, APIs, authentication systems, and business rules
  • Designed for scalability, security, reliability, and maintainability
  • More complex than normal websites or small CRUD apps

Simple Definition

Think of it like this:

TypeExample
Small web appTodo app, blog, portfolio
Enterprise web appAmazon Seller Portal, Jira, Salesforce, Banking System

Enterprise applications solve real business problems at scale.


Common Characteristics of Enterprise Web Applications

1. Multiple User Roles

Different users have different permissions.

Example:

  • Admin
  • Manager
  • Employee
  • Customer
  • Vendor

In Rails:

class User < ApplicationRecord
enum role: [:customer, :manager, :admin]
end

2. Authentication & Authorization

Enterprise apps require strong security.

Features:

  • Login systems
  • JWT/OAuth/SSO
  • Role-based access
  • Permissions

Examples:

  • Devise
  • Pundit
  • CanCanCan

3. Large Database & Complex Relations

Enterprise apps often manage huge amounts of data.

Examples:

  • Orders
  • Payments
  • Employees
  • Inventory
  • Reports

Complex queries become common:

  • joins
  • aggregations
  • analytics
  • reporting

4. Scalability

The app should support:

  • Thousands/millions of users
  • High traffic
  • Heavy background jobs

Common techniques:

  • Caching (Redis)
  • CDN
  • Load balancing
  • Database indexing
  • Background jobs (Sidekiq)

5. Background Processing

Many tasks run asynchronously.

Examples:

  • Sending emails
  • PDF generation
  • Syncing APIs
  • Video processing
  • Notifications

Rails example:

class InvoiceWorker
include Sidekiq::Worker
def perform(invoice_id)
InvoiceMailer.send_invoice(invoice_id)
end
end

6. API Integrations

Enterprise apps usually connect with many systems.

Examples:

  • Stripe
  • Salesforce
  • SAP
  • AWS
  • ERP systems
  • Shipping providers

7. Audit & Logging

Companies need tracking for compliance and debugging.

Example:

  • Who updated an order?
  • When was payment changed?
  • Which admin deleted a record?

Rails gems:

  • PaperTrail
  • Audited

8. High Security Requirements

Security is extremely important.

Features:

  • Encryption
  • Access control
  • Rate limiting
  • SQL injection protection
  • CSRF protection
  • MFA

9. Reporting & Analytics

Businesses need dashboards and reports.

Examples:

  • Revenue reports
  • User analytics
  • Sales graphs
  • Inventory statistics

10. Maintainability

Enterprise apps are developed for years by multiple teams.

Important concepts:

  • Clean architecture
  • Service objects
  • Design patterns
  • Testing
  • CI/CD
  • Documentation

Typical Enterprise Application Architecture

A modern enterprise Rails application may contain:

Frontend
↓
Rails Controllers
↓
Service Objects
↓
Domain Logic
↓
Database / External APIs

Additional components:

  • Redis
  • Sidekiq
  • Elasticsearch
  • Kubernetes
  • AWS/GCP
  • Monitoring systems

Real Examples

E-commerce

  • Amazon
  • Shopify Admin
  • Walmart internal systems

Finance

  • Banking portals
  • Insurance systems
  • Trading platforms

Healthcare

  • Hospital management systems
  • Electronic medical records

SaaS Platforms

  • Jira
  • GitHub
  • Salesforce
  • Slack

Enterprise Web App vs Regular Web App

FeatureRegular Web AppEnterprise Web App
UsersSmallMassive
ComplexityLowHigh
SecurityBasicAdvanced
ScalabilityModerateVery high
Team size1-5 devsLarge teams
IntegrationsFewMany
InfrastructureSimpleDistributed
TestingMinimalExtensive
MaintenanceShort-termLong-term

💎 Enterprise Web Apps in Ruby on Rails

Rails is widely used for enterprise applications because it provides:

  • Fast development
  • Convention over configuration
  • Excellent ORM
  • Mature ecosystem
  • Strong testing support

Companies using Rails at enterprise scale:

  • GitHub
  • Shopify
  • Basecamp
  • Airbnb (initially)
  • Stripe (partially)
  • Zendesk

Important Skills for Enterprise Rails Development

Since I am already experienced in Rails, enterprise-level skills usually mean mastering:

Backend Architecture

  • Service objects
  • Form objects
  • Query objects
  • Domain-driven design

Database Optimization

  • Indexing
  • EXPLAIN ANALYZE
  • N+1 fixes
  • Partitioning

Scaling

  • Redis
  • Sidekiq
  • Caching
  • Read replicas

DevOps

  • Docker
  • Kubernetes
  • CI/CD
  • AWS/GCP

Security

  • OAuth
  • JWT
  • SSO
  • RBAC

Testing

  • RSpec
  • System tests
  • Performance testing

Simple Real-World Example

A clothing shopping platform (similar to one of my app idea) becomes an enterprise application when it includes:

  • Multiple warehouses
  • Inventory sync
  • Payment gateways
  • Admin dashboards
  • Vendor management
  • Recommendation systems
  • Analytics
  • Multi-country support
  • CDN/caching
  • Queue processing
  • Microservices/API integrations

At that point, it is no longer just a CRUD app – it becomes an enterprise system.

Understanding Enums: Why They Exist, How They Work and How Rails Implements Them

Enums are one of those features developers use frequently – especially in frameworks like Rails – but many developers never fully understand why enums exist, what problem they solve, or how they are implemented internally. In Rails, enums appear deceptively simple:

enum status: { pending: 0, paid: 1, failed: 2 }

But behind this tiny line lies an important software design concept used across programming languages, databases, compilers, APIs, operating systems, and application architecture.

This article explains the complete picture of enums:

  • Why enums exist
  • How they differ from other data structures
  • How Rails maps enums to integers internally
  • Whether enums are tied to SQL/databases
  • How ActiveRecord::Enum works under the hood
  • Real-world benefits and tradeoffs developers should know

What Is an Enum?

An Enum (Enumeration) is a restricted set of named values representing a finite group of states or options.

Example:

status = :pending

Possible statuses may be:

:pending
:processing
:completed
:failed

Instead of allowing any arbitrary value, enums constrain the system to a known set of valid states.

Why Do Enums Exist?

Enums solve several important problems in software systems.

1. Prevent Invalid States

Without enums:

order.status = "asdfgh"

This may accidentally enter the database and corrupt business logic.

Enums restrict allowed values:

enum status: {
pending: 0,
processing: 1,
completed: 2
}

Now Rails only allows known states.

2. Improve Readability

Compare:

if order.status == 2

vs

if order.completed?

Enums convert meaningless numbers into expressive business language.

3. Save Storage Space

Integers are smaller and faster than strings.

Instead of storing:

"processing"

the DB stores:

1

This improves:

  • indexing
  • query performance
  • storage efficiency

4. Standardize State Management

Enums centralize valid states:

Order.statuses

returns:

{
"pending" => 0,
"processing" => 1,
"completed" => 2
}

This becomes a single source of truth.

5. Enable Better APIs & DSLs

Rails automatically generates methods:

order.pending?
order.completed!
Order.processing

Enums create expressive domain APIs.

How Enums Differ From Other Data Structures

Enums are NOT collections like arrays or hashes.

They represent a finite state system.

🔹 Enum vs Array

Array:

statuses = ["pending", "paid", "failed"]

Problem:

  • no constraints
  • no semantic meaning
  • no mapping behavior
  • no helper methods

🔹 Enum vs Hash

Hash:

STATUSES = {
pending: 0,
paid: 1
}

Closer, but still missing:

  • validations
  • query scopes
  • state predicates
  • DSL methods

Rails enums internally use hashes, but add behavior around them.

🔹 Enum vs Constants

Constants:

PENDING = 0
PAID = 1

Problem:

  • scattered
  • harder to manage
  • no grouped state semantics

Enums organize states cohesively.

🌍 Are Enums Related Only to SQL or Databases?

❌ Absolutely not.

Enums exist in:

  • C
  • Java
  • Rust
  • Swift
  • TypeScript
  • GraphQL
  • Operating systems
  • Compilers
  • APIs
  • State machines

Enums are a general programming concept, not a database feature.

Example: TypeScript Enum

enum Status {
Pending,
Processing,
Completed
}

Example: Java Enum

enum Status {
PENDING,
PROCESSING,
COMPLETED
}

Example: PostgreSQL Native Enum

CREATE TYPE status AS ENUM (
'pending',
'processing',
'completed'
);

This is database-level enum support.

🏗️ How Rails Implements Enums

Rails provides:

ActiveRecord::Enum

located in:

activerecord/lib/active_record/enum.rb

When you write:

class Order < ApplicationRecord
enum status: {
pending: 0,
processing: 1,
completed: 2
}
end

Rails dynamically generates:

1️⃣ Attribute Mapping

order.status
# => "pending"

Internally stored as:

0

in the database.

2️⃣ Predicate Methods

order.pending?
order.completed?

3️⃣ Bang Methods

order.completed!

Equivalent to:

order.update!(status: :completed)

4️⃣ Query Scopes

Order.pending
Order.completed

Generated automatically.

5️⃣ Mapping Helpers

Order.statuses

Returns:

{
"pending" => 0,
"processing" => 1,
"completed" => 2
}

How Rails Maps Enum Values to Integers

Internally Rails stores:

{
pending: 0,
processing: 1,
completed: 2
}

When assigning:

order.status = :processing

Rails converts:

:processing -> 1

before writing to DB.

When reading:

1 -> "processing"

This conversion is handled through ActiveRecord attribute type casting.

Database Example

Ruby:

order.status
# => "completed"

Actual DB value:

status = 2

Why Integers Are Commonly Used

Integers:

  • are compact
  • index efficiently
  • compare faster
  • are DB-friendly

This is why Rails originally used integer-backed enums.

Important Enum Pitfall: Order Matters

This is VERY important.

Dangerous

enum status: [:pending, :processing, :completed]

Rails maps automatically:

pending -> 0
processing -> 1
completed -> 2

If you later insert:

[:pending, :draft, :processing, :completed]

Everything shifts:

  • processing becomes 2
  • completed becomes 3

💥 Existing DB data breaks.

Correct (recommended)

Always use explicit mapping:

enum status: {
pending: 0,
processing: 1,
completed: 2
}

String-Based Enums in Rails

Rails also supports string-backed enums:

enum status: {
pending: "pending",
completed: "completed"
}

Benefits:

  • human-readable DB values
  • safer migrations
  • easier debugging

Tradeoff:

  • slightly larger storage
  • slightly slower indexing

🧪 Real SQL Generated by Rails Enum Queries

Order.completed

Generates:

SELECT *
FROM orders
WHERE status = 2;

Even though Ruby code uses names, SQL uses integers.

🔬 Internals: How ActiveRecord::Enum Works

Internally Rails:

  • stores mappings in a class hash
  • defines methods dynamically using metaprogramming
  • hooks into ActiveRecord attribute casting
  • builds scopes automatically

Rails essentially does something conceptually like:

define_method("completed?") do
status == "completed"
end

and:

scope :completed, -> { where(status: 2) }

This is why enums feel “magical.”

🚨 Limitations of Rails Enums

Enums are useful, but not perfect.

1. Hard to evolve complex workflows

If states become complicated:

pending -> approved -> shipped -> refunded -> disputed

you may need:

  • state machines
  • workflow engines

Examples:

  • aasm
  • state_machines

2. Integer values can become opaque

DB shows:

status = 2

Harder to debug directly.

3. No DB-level validation by default

Rails validates at app layer, but DB still accepts:

status = 999

unless constrained.

🛡️ Best Practices for Rails Enums

Use explicit mappings

enum status: {
pending: 0,
processing: 1,
completed: 2
}

Add DB constraints if critical

Example PostgreSQL constraint:

CHECK (status IN (0,1,2))

Keep enums focused

Good:

status
payment_state
visibility

Bad:

everything_state

Prefer string enums when readability matters

Especially in:

  • analytics-heavy apps
  • debugging-heavy systems
  • APIs

Consider state machines for complex transitions

Enums represent states.
State machines represent transitions.

Very different concepts.

Mental Model Every Developer Should Remember

Think of enums as:

“A controlled vocabulary for state.”

Enums are:

  • not collections
  • not just DB mappings
  • not Rails-specific

They are a way to model finite, meaningful states safely and expressively.

Final Takeaway

Enums exist because software systems constantly need to represent a limited set of valid states in a way that is:

  • efficient
  • readable
  • maintainable
  • safe

Rails’ ActiveRecord::Enum builds a powerful abstraction on top of simple integer (or string) mappings, generating expressive APIs, query scopes, and validations automatically through Ruby metaprogramming.

Understanding enums deeply helps developers:

  • design better domain models
  • avoid fragile state systems
  • write safer queries
  • reason about application workflows more clearly

Enums may look small, but they are one of the foundational building blocks of robust application design.

Happy Implementing! 🚀

Fixing PostgreSQL Startup Issues on macOS (Homebrew): A Real-World Troubleshooting Guide

Introduction

Recently, I encountered an interesting PostgreSQL issue on my MacBook.

PostgreSQL was installed via Homebrew and worked perfectly on one macOS user account. However, when switching to another account on the same machine, I was unable to connect to PostgreSQL using psql.

The error looked like this:

psql postgres
psql: error: connection to server on socket "/tmp/.s.PGSQL.5432" failed:
No such file or directory
Is the server running locally and accepting connections on that socket?

This article walks through the investigation, root cause analysis, and final solution.


Understanding the Error

When PostgreSQL starts successfully, it creates a Unix socket file:

/tmp/.s.PGSQL.5432

The psql client uses this socket by default to connect to the local PostgreSQL server.

The error indicates one of two possibilities:

  1. PostgreSQL is not running.
  2. PostgreSQL is running but not listening on the expected socket.

In my case, PostgreSQL was simply not running for the current macOS user account.


Initial Verification

Verify PostgreSQL Client Installation

which psql

Output:

/opt/homebrew/bin/psql

Check version:

psql --version

Output:

psql (PostgreSQL) 14.17 (Homebrew)

This confirmed that PostgreSQL client tools were correctly installed.

Verify Installed PostgreSQL Version

brew list | grep postgres

Output:

postgresql@14

Check Whether PostgreSQL Is Running

pg_isready

Output:

/tmp:5432 - no response

This confirmed that PostgreSQL was not accepting connections.

Manual Startup Worked

Interestingly, PostgreSQL could be started manually:

/opt/homebrew/opt/postgresql@14/bin/pg_ctl \
-D /opt/homebrew/var/postgresql@14 \
-l /opt/homebrew/var/log/postgresql.log start

Output:

waiting for server to start.... done
server started

This was a critical clue.

It told us:

  • PostgreSQL binaries were healthy.
  • Database files were healthy.
  • Data directory was healthy.
  • The issue was likely related to Homebrew services or macOS LaunchAgents.

Investigating Homebrew Services

Checking service status:

brew services list

Output:

Name Status User
postgresql@14 error 78 abhilash

Attempting to start the service:

brew services start postgresql@14

Result:

Bootstrap failed: 5: Input/output error
launchctl bootstrap gui/501

This indicated a problem with the macOS LaunchAgent used by Homebrew.


Root Cause

Homebrew services rely on macOS launchctl.

Each macOS user account gets its own LaunchAgents configuration.

Although PostgreSQL was installed globally under Homebrew, the LaunchAgent configuration for this specific user account had become corrupted or stale.

As a result:

  • Manual startup worked.
  • Automatic startup through Homebrew failed.

Fixing the LaunchAgent

Stop Existing Service

brew services stop postgresql@14

Remove Existing LaunchAgent

rm ~/Library/LaunchAgents/homebrew.mxcl.postgresql@14.plist

Clean Up Homebrew Services

brew services cleanup

Verify Ownership

ls -ld /opt/homebrew/var/postgresql@14

If ownership is incorrect:

sudo chown -R $(whoami):staff /opt/homebrew/var/postgresql@14

Recreate the Service

After cleanup:

brew services start postgresql@14

Output:

Successfully started `postgresql@14`

Checking status:

brew services list

Output:

postgresql@14 started

Success!


Verifying PostgreSQL Is Running

pg_isready

Output:

/tmp:5432 - accepting connections

Connecting:

psql postgres

Output:

postgres=#

PostgreSQL was now functioning normally.


Understanding a New Error

While reviewing PostgreSQL logs, I noticed:

FATAL: database "abhilash" does not exist

At first glance, this looked concerning.

However, this is normal behavior.

When you run:

psql

PostgreSQL automatically tries to connect to a database matching your operating system username.

For example:

macOS username = abhilash

PostgreSQL attempts:

CONNECT TO abhilash;

Since that database didn’t exist, PostgreSQL logged:

FATAL: database "abhilash" does not exist

Creating a Personal Database

To make plain psql work:

CREATE DATABASE abhilash;

Now simply running:

psql

works because PostgreSQL can find a matching database.


Key Lessons Learned

1. Verify Whether PostgreSQL Is Actually Running

pg_isready

is often the fastest diagnostic tool.

2. Manual Startup Helps Isolate the Problem

If pg_ctl start works, your PostgreSQL installation and data files are probably fine.

3. Homebrew Services Depend on macOS LaunchAgents

A corrupted LaunchAgent can prevent PostgreSQL from auto-starting even when PostgreSQL itself is healthy.

4. Don’t Reinstall Immediately

Many developers jump directly to:

brew uninstall postgresql
brew install postgresql

In this case, reinstalling would not have fixed the issue and could have introduced additional problems.

5. Read the PostgreSQL Logs

Logs quickly reveal whether you’re dealing with:

  • Permission issues
  • Missing databases
  • Port conflicts
  • Startup failures
  • Authentication errors

Final Verification Checklist

brew services list
pg_isready
psql postgres

Expected results:

postgresql@14 started
/tmp:5432 - accepting connections
postgres=#

At this point, PostgreSQL is healthy and configured to start automatically after reboot.


Conclusion

What initially appeared to be a PostgreSQL installation problem turned out to be a macOS LaunchAgent issue specific to one user account.

By methodically checking:

  • PostgreSQL installation
  • Server status
  • Homebrew services
  • LaunchAgent configuration
  • PostgreSQL logs

we were able to restore automatic startup without reinstalling PostgreSQL or risking data loss.

This experience serves as a reminder that startup problems are often service-management issues rather than database issues.

Happy Debugging! 🚀

GCP Cloud SQL Disaster Recovery: A Practical Guide for Developers

When a production database goes down – whether from a bad migration, an accidental DROP TABLE, or a rogue script – the clock starts ticking. Every minute of downtime is lost revenue, broken trust, and a very stressful Slack channel.

This post walks through how Google Cloud SQL’s backup and recovery features work, common disaster scenarios, and the recovery playbook a developer should follow for each. The examples use a typical SaaS application backed by PostgreSQL on Cloud SQL, but the principles apply broadly.

Cloud SQL Backup Fundamentals

Before anything goes wrong, you need to understand what Cloud SQL gives you out of the box and what you need to configure yourself.

Automated Backups

Cloud SQL can take daily automated backups of your instance. These are full snapshots of the entire database and are retained for a configurable window (default 7 days, max 365).

# gcloud: verify automated backups are enabled
gcloud sql instances describe my-instance \
  --format="value(settings.backupConfiguration)"

Key settings to configure:

SettingRecommendationWhy
backupConfiguration.enabledtrueNon-negotiable for production
backupConfiguration.startTimeOff-peak hours (e.g. 04:00 UTC)Minimizes performance impact
backupConfiguration.backupRetentionSettings.retainedBackups14-30Gives you a wider recovery window
backupConfiguration.pointInTimeRecoveryEnabledtrueEnables PITR (see below)
backupConfiguration.transactionLogRetentionDays7How far back PITR can reach

Point-in-Time Recovery (PITR)

Automated backups give you daily snapshots. PITR fills the gaps by continuously archiving write-ahead logs (WAL for PostgreSQL, binary logs for MySQL). This lets you restore to any second within the retention window — not just to the time of the last backup.

# Enable PITR on an existing instance
gcloud sql instances patch my-instance \
  --enable-point-in-time-recovery \
  --retained-transaction-log-days=7

PITR is the single most important setting for disaster recovery. Without it, you lose every write between your last automated backup and the incident.

On-Demand Backups

You can trigger a backup manually before risky operations:

gcloud sql backups create --instance=my-instance \
  --description="pre-migration-backup-2026-04-08"

Rule of thumb: always take an on-demand backup before running migrations, bulk data operations, or any ad-hoc SQL against production.


Disaster Scenarios and Recovery Playbooks

Scenario 1: Accidental Table Drop or Data Deletion

What happened: A developer ran a DROP TABLE or DELETE FROM without a WHERE clause against production. Maybe it was a script meant for staging. Maybe an AI-generated SQL statement was executed without review.

Impact: One or more tables are gone or empty. The application is throwing 500s.

Recovery options:

Option A: PITR (best if available)

Restore to the moment just before the destructive command. You’ll need the approximate timestamp.

# Restore to a clone instance first — never restore directly over production
gcloud sql instances clone my-instance my-instance-recovery \
  --point-in-time="2026-04-08T10:59:00Z"

This creates a new instance with the database state at that exact second. You can then:

  1. Verify the data on the clone
  2. Export the affected tables from the clone
  3. Import them back into the production instance
# Export a specific table from the recovery clone
gcloud sql export sql my-instance-recovery gs://my-bucket/recovery/users-table.sql \
  --database=myapp_production \
  --table=users

# Import into production
gcloud sql import sql my-instance gs://my-bucket/recovery/users-table.sql \
  --database=myapp_production

Option B: Restore from automated backup

If PITR is not enabled, restore the most recent automated backup that predates the incident.

# List available backups
gcloud sql backups list --instance=my-instance

# Restore a specific backup (this overwrites the instance)
gcloud sql backups restore BACKUP_ID --restore-instance=my-instance

Warning: Restoring a backup directly onto your production instance overwrites everything. All writes since that backup are lost. Prefer cloning to a recovery instance first.

The data gap problem:

When you restore from a backup taken at, say, 4:00 AM, but the incident happened at 11:00 AM, you lose 7 hours of data. This is the gap you’ll need to address manually. Common strategies:

  • Application-level event logs: If your app publishes events to a message queue (Kafka, Pub/Sub), you can replay them.
  • Analytics replicas: If you replicate data to BigQuery, Snowflake, or another analytics store, you can query the missing records from there and re-import them.
  • Audit tables: If your application logs changes to an audit table in a separate database, those records survive.
-- Example: querying BigQuery for records created during the gap window
SELECT *
FROM `project.dataset.user_actions`
WHERE created_at BETWEEN TIMESTAMP('2026-04-08 04:00:00', 'America/Vancouver')
  AND TIMESTAMP('2026-04-08 11:00:00', 'America/Vancouver')
  AND action_type = 'account_status_change'

You then re-ingest these records into production, typically via a script run in your application’s console or through a migration task.


Scenario 2: Interrupted Background Job

What happened: A critical scheduled job — say, one that generates weekly records for all active users — was running when the incident occurred. The database was restored from backup, but the job was killed mid-execution. Some users got their records; others didn’t.

Impact: No application errors (the data that exists is valid), but there’s a silent gap. Some users are missing records they should have.

Recovery playbook:

Step 1 — Quantify the gap

Before doing anything, measure what’s missing:

# Find users who should have a record but don't
target_date = Date.parse('2026-05-30')
users_missing = User.where(status: ['active', 'subscribed'])
  .where.not(id: WeeklyRecord.where(week_date: target_date).select(:user_id))
users_missing.count

Record the count. You’ll need it for verification later.

Step 2 – Understand the generation logic

Before re-running anything, understand what the job does:

  • Does it check for existing records before creating? (idempotent?)
  • Does it behave differently based on user status? (e.g., suspended users get a different treatment)
  • Does it trigger side effects? (emails, webhooks, billing)

If the job is idempotent — meaning running it twice for the same user produces the same result without duplicates — you can safely re-run it for all users, not just the ones missing records. This is simpler and safer than trying to target only the gap.

Step 3 – Re-run with guardrails

Write a targeted script rather than re-triggering the entire job:

target_date = Date.parse('2026-05-30')
# Pre-check
baseline_count = WeeklyRecord.where(week_date: target_date).count
puts "Records before: #{baseline_count}"
# Find and process missing users
users_missing = User.where(status: ['active', 'subscribed'])
.where.not(id: WeeklyRecord.where(week_date: target_date).select(:user_id))
puts "Users missing records: #{users_missing.count}"
users_missing.find_each do |user|
WeeklyRecordGenerator.new(user).generate(target_date)
rescue => e
puts "Failed for User ##{user.id}: #{e.message}"
end
# Post-check
new_count = WeeklyRecord.where(week_date: target_date).count
puts "Records after: #{new_count}"
puts "Delta: #{new_count - baseline_count}"

Step 4 – Verify

Check that:

  • The record count increased by the expected amount
  • No duplicates were created
  • No users are still missing records
  • Any status-dependent logic was applied correctly (e.g., suspended users got the right treatment)

Scenario 3: Corrupted Data from a Bad Migration

What happened: A migration altered a column type, dropped a constraint, or backfilled data incorrectly. The application is running but producing wrong results.

Impact: Data is present but incorrect. This is often harder to detect than missing data.

Recovery playbook:

  1. Don’t panic-restore. If the app is functional (just producing wrong data), you have time to assess.
  2. Clone to a recovery instance from a backup predating the migration: gcloud sql instances clone my-instance pre-migration-clone \ --point-in-time="2026-04-07T23:00:00Z"
  3. Diff the data between production and the clone to understand exactly what changed: -- Compare row counts SELECT 'production' as source, count(*) FROM production.orders UNION ALL SELECT 'backup' as source, count(*) FROM backup_clone.orders; -- Find rows that differ SELECT p.id, p.amount as prod_amount, b.amount as backup_amount FROM production.orders p JOIN backup_clone.orders b ON p.id = b.id WHERE p.amount != b.amount;
  4. Write a targeted fix rather than a full restore (which would lose post-migration legitimate writes).
  5. Write a rollback migration if the schema change itself was the problem.

Scenario 4: Full Instance Failure

What happened: The Cloud SQL instance is unreachable – maybe a zone outage, maybe accidental instance deletion.

Recovery options:

If the instance still exists (zone outage):

Cloud SQL instances configured for high availability will automatically failover to a standby in another zone. If you don’t have HA enabled:

# Enable HA (requires instance restart)
gcloud sql instances patch my-instance --availability-type=REGIONAL

If the instance was deleted:

Deleted instances can be recovered within a limited window if deletion protection wasn’t bypassed:

# Enable deletion protection
gcloud sql instances patch my-instance --deletion-protection

If truly gone, restore from the most recent backup to a new instance:

gcloud sql instances create my-instance-restored \
--source-backup=BACKUP_ID \
--tier=db-custom-4-16384 \
--region=us-west1

Then update your application’s database connection string to point to the new instance.


Prevention Checklist

The best disaster recovery is the one you never need. Here’s what to set up before things go wrong:

Cloud SQL Configuration

# The production-ready configuration checklist
gcloud sql instances patch my-instance \
--backup-start-time=04:00 \
--enable-point-in-time-recovery \
--retained-transaction-log-days=7 \
--retained-backups-count=30 \
--deletion-protection \
--availability-type=REGIONAL

Operational Practices

1. Never run ad-hoc SQL directly against production

Use a read replica for investigative queries. If you must write, use a transaction with a manual ROLLBACK checkpoint:

BEGIN;

-- Your change here
UPDATE users SET status = 'inactive' WHERE last_login < '2025-01-01';

-- Verify before committing
SELECT count(*) FROM users WHERE status = 'inactive';

-- Only if the count looks right:
COMMIT;
-- Otherwise:
ROLLBACK;

2. Take on-demand backups before risky operations

gcloud sql backups create --instance=my-instance \
--description="pre-bulk-update-$(date +%Y%m%d-%H%M%S)"

3. Review AI-generated SQL before executing

AI tools are excellent at generating SQL, but they don’t understand your data invariants. A syntactically correct DROP TABLE or DELETE without a WHERE clause is still catastrophic. Always:

  • Read the generated SQL line by line
  • Run it on staging first
  • Wrap destructive operations in a transaction
  • Have a second pair of eyes for DDL changes

4. Maintain an analytics replica

Replicate critical tables to BigQuery or another analytics store. This serves as both an analytics platform and a recovery source. If your primary database loses data, you can query the replica for the gap window and re-ingest.

# Set up a BigQuery data transfer from Cloud SQL
bq mk --transfer_config \
--target_dataset=sql_replica \
--display_name="Production SQL Replica" \
--data_source=scheduled_query \
--schedule="every 1 hours"

5. Use IAM to restrict destructive operations

Not every developer needs cloudsql.instances.delete or direct SQL access to production:

# Create a read-only role for most developers
gcloud projects add-iam-policy-binding my-project \
--member="group:developers@company.com" \
--role="roles/cloudsql.viewer"
# Grant write access only to the ops team
gcloud projects add-iam-policy-binding my-project \
--member="group:database-ops@company.com" \
--role="roles/cloudsql.admin"

The Recovery Timeline: What Happens in Practice

Here’s what a real recovery typically looks like, end to end:

T+0min Incident detected (alerts fire, app errors spike)
T+5min Confirm the issue — is it a code bug or data loss?
T+10min Identify the last good backup / PITR target
T+15min Clone instance from backup (takes 5-30 min depending on size)
T+45min Verify restored data on the clone
T+60min Restore production from clone or selectively import tables
T+90min Identify the data gap (writes between backup and incident)
T+120min Query analytics replica / event logs for gap data
T+150min Re-ingest gap data, verify counts
T+180min Re-run interrupted jobs with verification
T+210min Final validation — all counts match, no duplicates, app healthy
T+240min Post-incident review

The total time depends on database size, gap complexity, and whether you had PITR enabled. With PITR, the gap is seconds. Without it, you could be looking at hours of manual data reconciliation.


Key Takeaways

  1. Enable PITR. It’s the difference between losing seconds of data and losing hours.
  2. Always clone to a recovery instance first. Never restore directly over production unless you have no other option.
  3. Maintain an analytics replica. It’s your insurance policy for the data gap.
  4. Quantify before you fix. Record counts before and after every recovery step. You can’t verify what you didn’t measure.
  5. Understand your jobs’ idempotency. If a background job was interrupted, knowing whether it’s safe to re-run is the difference between a smooth recovery and creating a bigger mess.
  6. Take on-demand backups before risky operations. The 30 seconds it takes could save you 4 hours of recovery.
  7. Review all SQL before execution. Especially AI-generated SQL. Trust, but verify.

Production incidents are stressful, but with the right configuration and a clear playbook, they don’t have to be catastrophic. Set up your backups today — future you will be grateful.

Happy fixing!


Engineer’s Guide to Cursor AI: Mastering the AI-First IDE in 2026

A comprehensive technical deep-dive into Cursor’s architecture, capabilities, and how to wield it effectively.

1. How Cursor Started: From MIT Dorm to $10B Valuation

Cursor didn’t emerge from a traditional enterprise software company. It was born in 2022 when four MIT students—Michael Truell, Sualeh Asif, Arvid Lunnemark, and Aman Sanger—founded Anysphere with a contrarian thesis: instead of bolting AI onto existing editors (like GitHub Copilot’s extension approach), they would build an AI-first code editor from the ground up.

The key architectural bet was simple but profound: fork VS Code and embed AI into the core runtime rather than as an extension. This meant AI could access the full editor context—open files, project structure, terminal output, and git state—without the latency and permission boundaries that plague extension-based assistants.

By September 2023, Cursor had raised $8M from OpenAI (with $11M total), with the founders publicly stating their ambition: “a code editor that makes it nearly impossible to write bugs” and enables developers to “create thousands of lines of code with minimal input.”

They entered a market dominated by Copilot (launched 2021) and newcomers like Codeium and Tabnine. Their differentiator wasn’t just better models—it was multi-file editing. Early AI models were too slow for this; by the time GPT-4 and Claude arrived, Cursor’s architecture was ready to exploit them.


2. The AI Era of Coding

We’re past the “AI-assisted coding” phase. We’re in the AI-augmented development era, where the question isn’t whether to use AI, but how to integrate it into your workflow without sacrificing quality, security, or control.

The shift has three dimensions:

  1. From autocomplete to agents: Tab completion (Copilot-style) is table stakes. The frontier is autonomous agents that plan, execute, and verify multi-step tasks across your codebase.
  2. From single-file to codebase-aware: Context windows have exploded (100K+ tokens). AI can now reason over entire repos, not just the file you’re editing.
  3. From chat to tool use: AI assistants now call APIs, run terminals, query databases, and control browsers via protocols like MCP (Model Context Protocol).

Developers who treat AI as “fancy autocomplete” are leaving 3–5x productivity gains on the table. Those who learn to orchestrate agents, rules, and context effectively are redefining what “senior engineer” means.


3. Cursor in 2024 / 2025: The Acceleration

2024: Composer, Agents, and Context

  • Composer with Agent (Nov–Dec 2024): Sidebar UI with inline diffs; agents that pick their own context and use the terminal.
  • Yolo Mode: Agents auto-run terminal commands with exit code visibility.
  • @Context References: @docs, @git, @web, @folder, @Lint Errors for flexible context selection.
  • Commit message generation: Automatic git commit messages from diffs.

2025: Agent as Default, Rules, and Model Explosion

  • Agent as Default (v0.46, Feb 2025): Chat, Composer, and Agent unified into one interface. Agent is now the primary mode.
  • .cursor/rules & Project Rules: Repository-level rules in .cursor/rules that agents automatically apply. Visual indicators show when rules are active.
  • Web Search Integration: Agents automatically search the web for current information without explicit commands.
  • Deepseek Support: Deepseek R1 and v3 models, self-hosted in the US.
  • Fusion Tab Model: Cursor-trained model for code jumps and long context—~100ms faster completions, 30% reduced time-to-first-token.
  • Credit-based billing (June 2025): Shift from request-based to credit-based pricing.

4. How Cursor Works and the Models It Provides

Architecture Overview

Cursor is a fork of VS Code with AI baked into the runtime. Key components:

  • Tab (inline completions): Real-time suggestions as you type. Uses Cursor’s proprietary Fusion model and third-party models.
  • Agent / Composer: Multi-turn, multi-file editing. Can read files, run commands, apply edits, and iterate.
  • Chat: Conversational interface for questions, explanations, and quick edits.
  • Rules & Skills: Declarative rules (.cursor/rules, RULE.md) and procedural skills (SKILL.md) that shape agent behavior.

Model Lineup (2025–2026)

ModelUse CaseNotes
GPT-4oGeneral coding, fast completionsOpenAI’s flagship
Claude Sonnet 3.5 / OpusComplex reasoning, long contextAnthropic
Gemini ProAlternative for completionsGoogle
Deepseek R1 / v3Cost-effective, strong reasoningSelf-hosted in US
Cursor ComposerMulti-file edits, agent tasksProprietary, fine-tuned
Cursor Fusion TabInline completionsProprietary, low latency
Codebase UnderstandingSemantic search, contextProprietary

Pricing Tiers (2026)

  • Hobby (Free): 2,000 completions, 50 slow premium requests/month.
  • Pro ($20/mo): 500 fast premium requests, unlimited slow, $20 API agent usage.
  • Pro Plus ($60/mo): 1,500 fast agent requests, extended context.
  • Ultra ($200/mo): 5,000 fast requests, unlimited Max Mode, experimental models.
  • Business ($40/user/mo): Privacy mode, SSO, admin dashboard.
  • Enterprise: Custom pricing, audit logs, dedicated support.

5. Using Cursor Efficiently: MCP, Agents, Code Reviews, and More

MCP (Model Context Protocol)

MCP is an open standard (Anthropic, late 2024) that acts as a “USB-C port for AI”—letting Cursor connect to external tools and data sources. Instead of pasting API docs or database schemas into chat, you configure MCP servers that the agent can query directly.

Components:

  • Server: Bridge to tools (databases, APIs, browsers).
  • Client: Cursor’s engine deciding when to call tools.
  • Host: Cursor’s UI.

Transports: Stdio (local, low latency) and SSE (remote, team sharing).

High-leverage integrations:

  • Browser control: Navigate, click, fill forms for E2E testing.
  • Databases: Postgres, Supabase—query and reason over schema.
  • Linear, GitHub, Jira: Create tickets, PRs, link context.
  • Figma: Pull design context, screenshots for implementation.

Best practices:

  • Use .cursorrules to govern when agents use tools.
  • Never hardcode API keys; use env vars.
  • Avoid connecting too many tools—performance degrades.
  • MCP can reduce token consumption by 18–37% by fetching only what’s needed.

Agents and Subagents

Agents are the primary interface in Cursor. They:

  • Plan multi-step tasks.
  • Read files, run terminal commands, apply edits.
  • Use subagents for parallel work (research, terminal, specialized tasks).

Subagents (v2.4, Jan 2026): Independent agents for discrete subtasks. Run in parallel, use their own context. Can spawn their own subagents (tree structure). Enables larger refactors and multi-file features.

Skills (SKILL.md): Procedural “how-to” instructions. Better for dynamic context than always-on rules. Invoke via slash commands when relevant.

Rules and Project Context

  • .cursor/rules: Directory of rule files. Agents automatically apply these. Use for conventions, architecture decisions, testing requirements.
  • RULE.md: File-specific or project-level rules.
  • CLAUDE.md: Documentation for AI (common in open source). Cursor respects these.

Example rule:

Always use .to_cents for legacy decimal money values.
Never add noLayout meta to admin pages.
Create specs for all new classes.

Code Reviews

  • Inline diffs: Agent shows changes in sidebar before applying.
  • Cursor Blame (Enterprise): AI attribution—see what’s AI-generated vs human-written, with links to the conversation that produced each line.
  • Plan mode: Agent generates a plan; you approve before execution. Use /plan to revisit.

Practical Workflow Tips

  1. Start with rules: Add .cursor/rules before heavy agent use. Saves iterations.
  2. Use @-mentions: @file, @folder, @docs, @web to scope context.
  3. Agent for refactors, Tab for flow: Use agents for multi-file work; Tab for fast inline completion during focused coding.
  4. Lock browser before interactions: If using browser MCP—navigate first, then lock, then interact, then unlock.
  5. Skills for domain logic: Create SKILL.md for project-specific workflows (e.g., “How we deploy,” “How we run migrations”).

6. Major Competitors

ToolPositioningStrengthsWeaknesses
GitHub CopilotExtension, ecosystem20M+ users, tight GitHub integration, multi-turn chat, agent modeLess codebase-aware than Cursor; extension limits
Windsurf (ex-Codeium)Budget-friendlyGenerous free tier, Cascade agent mode ($15/mo)Smaller ecosystem, less mature
Claude CodeTerminal + IDE integrationBest-in-class reasoning, SWE-bench 72–79%, flexible architecturePay-per-use can spike; terminal-first
Amazon Q DeveloperAWS-centricFree tier, AWS integrationNarrow for non-AWS work
TabninePrivacy-focusedSelf-hosting, on-premLess capable agents
Sourcegraph CodyEnterprise codebaseOptimized for large reposSmaller feature set

Cursor’s niche: Full IDE with deepest codebase integration, multi-model support, and agent-first design. Best for teams that want one tool for daily coding and complex refactors.


7. Advantages Over Claude Code (Claude Co-Work)

DimensionCursorClaude Code
InterfaceFull IDE (VS Code fork)Terminal + IDE extension
SetupInstall and goAPI keys, extension setup
Cost predictabilityFlat $20/mo ProPay-per-use (~$3/M input tokens); can hit $300+ in hours
OfflineTab completions work offlineRequires API
ContextNative codebase indexingRelies on IDE extension context
WorkflowSingle environment for edit, run, reviewSplit between terminal and editor
MCPBuilt-in, rich ecosystemVia extension

Choose Cursor when: You want an all-in-one IDE, predictable costs, and minimal setup. Ideal for daily coding flow.


8. Drawbacks vs. Claude Code

DimensionCursorClaude Code
Reasoning qualityStrong, but Claude Code leads on complex tasksBest-in-class; SWE-bench 72–79% vs Cursor ~62%
Refactoring scaleExcellentSlightly better for large-scale, multi-repo refactors
Editor choiceLocked to Cursor (VS Code fork)Use any editor; terminal-first
Model flexibilityCursor’s model selectionDirect Anthropic API; latest Claude first
Autonomous operationAgent + sandboxCheckpoints, background tasks, subagents—more mature
Cost at scale$20–200/mo fixedCan be cheaper for light use; expensive for heavy

Choose Claude Code when: You need maximum reasoning quality, want to keep your current editor, or have variable usage (pay only when you use it).

Many senior engineers use both: Cursor for daily flow; Claude Code for major refactors and complex debugging.


9. Alternatives to Consider in 2026

  • GitHub Copilot Pro+ ($39/mo): If you’re deep in GitHub/GitHub Actions. Access to Claude Opus 4, GPT-5. Best ecosystem fit.
  • Windsurf (free / $15 Cascade): If budget is primary. Solid free tier, capable agent mode.
  • Claude Code + VS Code extension: If you prioritize reasoning and editor flexibility. Pay-per-use.
  • Amazon Q Developer: If you’re AWS-native. Free tier, good for AWS-specific tasks.
  • Tabnine: If you need self-hosting or strict data residency.
  • Continue.dev: Open-source, self-hostable. For teams that want full control.

Stack strategy: Cursor for primary IDE + Claude Code for hard problems + Copilot for GitHub-centric workflows is a common “power user” setup.


10. The Future of Cursor and How Developers Will Use It

Where Cursor Is Heading (2026+)

  • Cloud agents with computer use (Feb 2026): Agents run in isolated VMs, produce merge-ready PRs with videos/screenshots. Available on web, desktop, mobile, Slack, GitHub.
  • Long-running agents: Plan-first execution for larger tasks. Fewer follow-ups, more complete PRs.
  • Marketplace plugins: Pre-built integrations (Amplitude, AWS, Figma, Linear, Stripe) installable via /add-plugin.
  • Self-driving codebases: Multi-agent research harness in preview.
  • Composer 1.5: 20x scaling of reinforcement learning for reasoning.
  • Agent sandboxing: Granular network and filesystem controls for security.

How Developers Will Use It

  1. Orchestration over authorship: Senior engineers will spend more time defining rules, skills, and MCP integrations than writing boilerplate. The agent writes; the human directs.
  2. Review as primary skill: With Cursor Blame and inline diffs, code review becomes the highest-leverage activity. Understanding why AI made a change matters more than writing the change.
  3. Domain-specific skills: Teams will maintain SKILL.md libraries for their stack (e.g., “How we do auth,” “How we deploy to Fly.io”).
  4. Hybrid local + cloud: Local agent for fast iteration; cloud agent for CI-like verification and demos.
  5. Cursor as platform: Plugins and MCP will turn Cursor into a hub for design, analytics, deployment—not just coding.

The Bottom Line

Cursor has reached $500M ARR and a $10B valuation by 2025. Enterprise adoption (Stripe, Box, NVIDIA) reports 30–50% roadmap throughput gains. The question for 2026 isn’t whether to use AI—it’s whether you’re using it as a junior engineer (tab completion only) or as a senior engineer (agents, rules, MCP, and strategic tool choice).

Master Cursor’s rules, MCP, and agent workflows. Pair it with Claude Code for hard problems. Keep your skills sharp on review and architecture. The developers who do this will define the next decade of software engineering.


Written from the perspective of a senior software engineer who has shipped production systems with Cursor, Claude Code, and Copilot.

Mastering RSpec Test Doubles in Rails 7+ (Ruby 3+)

When writing tests in RSpec, especially in modern Rails 7+ apps with Ruby 3+, understanding test doubles, stubs, and mocks is essential for writing clean, fast, and maintainable tests.

In this guide, we’ll break down:

  • What are doubles, stubs, and mocks
  • When to use each
  • Common RSpec methods (let, let!, subject, allow, expect)
  • Real-world Rails examples (controllers, services, serializers)
  • Best practices and pitfalls

Why do we need test doubles?

In real applications, your code interacts with:

  • External APIs
  • Databases
  • Background jobs
  • Third-party services (Stripe, Redis, etc.)

Testing all of these directly makes tests:

  • Slow
  • Fragile
  • Hard to isolate

Test doubles solve this by replacing real dependencies with controlled, predictable behavior.


1. Test Double – The Foundation

What is a double?

A double is a fake object that stands in for a real one.

let(:user) { double('User', name: 'Adam') }
it 'returns user name' do
expect(user.name).to eq('Adam')
end

instance_double (Recommended)

let(:user) { instance_double(User, name: 'Adam') }

Why better?

  • Verifies methods exist on real class
  • Prevents typos

Rule:

Use instance_double over double whenever possible


2. Stub — Controlling Behavior

What is a stub?

A stub defines what a method should return.

allow(user).to receive(:admin?).and_return(true)

You are saying:

“If admin? is called, return true.”


Rails Example

class DiscountService
def initialize(user)
@user = user
end
def call
@user.admin? ? 50 : 10
end
end

Spec:

describe DiscountService do
let(:user) { instance_double(User) }
it 'returns 50 for admin user' do
allow(user).to receive(:admin?).and_return(true)
result = described_class.new(user).call
expect(result).to eq(50)
end
end

Key idea:

  • Stub = control output
  • Does NOT verify method is called

3. Mock — Verifying Behavior

What is a mock?

A mock verifies that a method was called.

expect(service).to receive(:call)

You are saying:

“This method MUST be called.”

Rails Example (Service interaction)

class OrderProcessor
def initialize(payment_gateway)
@payment_gateway = payment_gateway
end
def call(amount)
@payment_gateway.charge(amount)
end
end

Spec:

describe OrderProcessor do
let(:gateway) { instance_double('PaymentGateway') }
it 'charges the payment gateway' do
expect(gateway).to receive(:charge).with(1000)
described_class.new(gateway).call(1000)
end
end

Key idea:

  • Mock = verify interaction
  • Test fails if method is NOT called

4. Stub + Real Method → .and_call_original

Hybrid approach

expect(User).to receive(:find).and_call_original

Meaning:

  • Verify method is called ✅
  • Execute real implementation ✅

Rails Example

expect(Serializers::ProductInfo).to receive(:new).with(
product: product,
date: Date.today
).and_call_original

Use carefully:

  • Tests implementation, not behavior
  • Can become brittle

5. let vs let!

let (lazy)

let(:user) { create(:user) }
  • Runs only when used

let! (eager)

let!(:user) { create(:user) }
  • Runs before each test

Example

let!(:recipes) { create_list(:recipe, 3) }
it 'returns recipes' do
get '/recipes'
expect(JSON.parse(response.body).size).to eq(3)
end

Rule:

  • Use let by default
  • Use let! when DB setup must happen before request

6. subject — Defining the Action

subject(:request) { get '/api/v1/home/homepage' }

Usage

it 'returns 200' do
request
expect(response).to have_http_status(:ok)
end

Benefits:

  • Reusable
  • Lazy
  • Override in contexts

7. allow_any_instance_of (⚠️ Avoid if possible)

allow_any_instance_of(User).to receive(:admin?).and_return(true)

Problem:

  • Affects ALL instances
  • Hard to debug
  • Breaks isolation

Better:

allow(user).to receive(:admin?).and_return(true)

8. Real Rails Example (Controller + Service)

Controller

class OrdersController < ApplicationController
def create
order = OrderBuilder.new(params).create
render json: { id: order.id }
end
end

Spec

describe 'POST /orders' do
let(:mock_order) { instance_double(Order, id: 123) }
let(:builder) { instance_double(OrderBuilder) }
before do
allow(OrderBuilder).to receive(:new).and_return(builder)
allow(builder).to receive(:create).and_return(mock_order)
end
it 'returns order id' do
post '/orders', params: { name: 'Test' }
expect(response).to have_http_status(:ok)
expect(JSON.parse(response.body)['id']).to eq(123)
end
end

Summary Table

ConceptMethodPurpose
Doubledouble, instance_doubleFake object
Stuballow(...).to receiveControl return value
Mockexpect(...).to receiveVerify method call
Hybrid.and_call_originalVerify + run real code
Lazy setupletRun when needed
Eager setuplet!Run before test
ActionsubjectDefine main execution

Common Pitfalls

Over-mocking

  • Tests break on refactor
  • Tests implementation, not behavior

Using allow_any_instance_of

  • Global side effects
  • Avoid unless absolutely necessary

Too many let!

  • Slower tests
  • Hidden setup

Best Practices

  • Prefer behavior testing over implementation
  • Use instance_double instead of double
  • Keep tests readable like English
  • Use shared_context for repeated setup
  • Avoid overusing mocks

Final Thought

Think of RSpec like this:

  • Double → Fake object
  • Stub → “Return this value”
  • Mock → “This must be called”

Mastering these will make your Rails tests:

  • Faster ⚡
  • Cleaner 🧼
  • More reliable 🧪

Happy Testing!